<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=11"/>
<meta name="generator" content="Doxygen 1.9.8"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>libcoap: coap_openssl.c Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtreedata.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
 <tbody>
 <tr id="projectrow">
  <td id="projectalign">
   <div id="projectname">libcoap<span id="projectnumber">&#160;4.2.0</span>
   </div>
  </td>
 </tr>
 </tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.9.8 -->
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
var searchBox = new SearchBox("searchBox", "search/",'.html');
/* @license-end */
</script>
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
$(function() {
  initMenu('',true,false,'search.php','Search');
  $(document).ready(function() { init_search(); });
});
/* @license-end */
</script>
<div id="main-nav"></div>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
$(document).ready(function() { init_codefold(0); });
/* @license-end */
</script>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
  <div id="nav-tree">
    <div id="nav-tree-contents">
      <div id="nav-sync" class="sync"></div>
    </div>
  </div>
  <div id="splitbar" style="-moz-user-select:none;" 
       class="ui-resizable-handle">
  </div>
</div>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:d3d9a9a6595521f9666a5e94cc830dab83b65699&amp;dn=expat.txt MIT */
$(document).ready(function(){initNavTree('coap__openssl_8c_source.html',''); initResizable(); });
/* @license-end */
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
     onmouseover="return searchBox.OnSearchSelectShow()"
     onmouseout="return searchBox.OnSearchSelectHide()"
     onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>

<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<div id="MSearchResults">
<div class="SRPage">
<div id="SRIndex">
<div id="SRResults"></div>
<div class="SRStatus" id="Loading">Loading...</div>
<div class="SRStatus" id="Searching">Searching...</div>
<div class="SRStatus" id="NoMatches">No Matches</div>
</div>
</div>
</div>
</div>

<div class="header">
  <div class="headertitle"><div class="title">coap_openssl.c</div></div>
</div><!--header-->
<div class="contents">
<a href="coap__openssl_8c.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a id="l00001" name="l00001"></a><span class="lineno">    1</span><span class="comment">/*</span></div>
<div class="line"><a id="l00002" name="l00002"></a><span class="lineno">    2</span><span class="comment">* coap_openssl.c -- Datagram Transport Layer Support for libcoap with openssl</span></div>
<div class="line"><a id="l00003" name="l00003"></a><span class="lineno">    3</span><span class="comment">*</span></div>
<div class="line"><a id="l00004" name="l00004"></a><span class="lineno">    4</span><span class="comment">* Copyright (C) 2017 Jean-Claude Michelou &lt;jcm@spinetix.com&gt;</span></div>
<div class="line"><a id="l00005" name="l00005"></a><span class="lineno">    5</span><span class="comment">* Copyright (C) 2018 Jon Shallow &lt;supjps-libcoap@jpshallow.com&gt;</span></div>
<div class="line"><a id="l00006" name="l00006"></a><span class="lineno">    6</span><span class="comment">*</span></div>
<div class="line"><a id="l00007" name="l00007"></a><span class="lineno">    7</span><span class="comment">* This file is part of the CoAP library libcoap. Please see README for terms</span></div>
<div class="line"><a id="l00008" name="l00008"></a><span class="lineno">    8</span><span class="comment">* of use.</span></div>
<div class="line"><a id="l00009" name="l00009"></a><span class="lineno">    9</span><span class="comment">*/</span></div>
<div class="line"><a id="l00010" name="l00010"></a><span class="lineno">   10</span> </div>
<div class="line"><a id="l00011" name="l00011"></a><span class="lineno">   11</span><span class="preprocessor">#include &quot;coap_config.h&quot;</span></div>
<div class="line"><a id="l00012" name="l00012"></a><span class="lineno">   12</span> </div>
<div class="line"><a id="l00013" name="l00013"></a><span class="lineno">   13</span><span class="preprocessor">#ifdef HAVE_OPENSSL</span></div>
<div class="line"><a id="l00014" name="l00014"></a><span class="lineno">   14</span> </div>
<div class="line"><a id="l00015" name="l00015"></a><span class="lineno">   15</span><span class="comment">/*</span></div>
<div class="line"><a id="l00016" name="l00016"></a><span class="lineno">   16</span><span class="comment"> * OpenSSL 1.1.0 has support for making decisions during receipt of</span></div>
<div class="line"><a id="l00017" name="l00017"></a><span class="lineno">   17</span><span class="comment"> * the Client Hello - the call back function is set up using</span></div>
<div class="line"><a id="l00018" name="l00018"></a><span class="lineno">   18</span><span class="comment"> * SSL_CTX_set_tlsext_servername_callback() which is called later in the</span></div>
<div class="line"><a id="l00019" name="l00019"></a><span class="lineno">   19</span><span class="comment"> * Client Hello processing - but called every Client Hello.</span></div>
<div class="line"><a id="l00020" name="l00020"></a><span class="lineno">   20</span><span class="comment"> * Certificates and Preshared Keys have to be set up in the SSL CTX before</span></div>
<div class="line"><a id="l00021" name="l00021"></a><span class="lineno">   21</span><span class="comment"> * SSL_Accept() is called, making the code messy to decide whether this is a</span></div>
<div class="line"><a id="l00022" name="l00022"></a><span class="lineno">   22</span><span class="comment"> * PKI or PSK incoming request to handle things accordingly if both are</span></div>
<div class="line"><a id="l00023" name="l00023"></a><span class="lineno">   23</span><span class="comment"> * defined.  SNI has to create a new SSL CTX to handle different server names</span></div>
<div class="line"><a id="l00024" name="l00024"></a><span class="lineno">   24</span><span class="comment"> * with different crtificates.</span></div>
<div class="line"><a id="l00025" name="l00025"></a><span class="lineno">   25</span><span class="comment"> *</span></div>
<div class="line"><a id="l00026" name="l00026"></a><span class="lineno">   26</span><span class="comment"> * OpenSSL 1.1.1 introduces a new function SSL_CTX_set_client_hello_cb().</span></div>
<div class="line"><a id="l00027" name="l00027"></a><span class="lineno">   27</span><span class="comment"> * The call back is invoked early on in the Client Hello processing giving</span></div>
<div class="line"><a id="l00028" name="l00028"></a><span class="lineno">   28</span><span class="comment"> * the ability to easily use different Preshared Keys, Certificates etc.</span></div>
<div class="line"><a id="l00029" name="l00029"></a><span class="lineno">   29</span><span class="comment"> * Certificates do not have to be set up in the SSL CTX before SSL_Accept is</span></div>
<div class="line"><a id="l00030" name="l00030"></a><span class="lineno">   30</span><span class="comment"> * called.</span></div>
<div class="line"><a id="l00031" name="l00031"></a><span class="lineno">   31</span><span class="comment"> * Later in the Client Hello code, the callback for</span></div>
<div class="line"><a id="l00032" name="l00032"></a><span class="lineno">   32</span><span class="comment"> * SSL_CTX_set_tlsext_servername_callback() is still called, but only if SNI</span></div>
<div class="line"><a id="l00033" name="l00033"></a><span class="lineno">   33</span><span class="comment"> * is being used by the client, so cannot be used for doing things the</span></div>
<div class="line"><a id="l00034" name="l00034"></a><span class="lineno">   34</span><span class="comment"> * OpenSSL 1.1.0 way.</span></div>
<div class="line"><a id="l00035" name="l00035"></a><span class="lineno">   35</span><span class="comment"> *</span></div>
<div class="line"><a id="l00036" name="l00036"></a><span class="lineno">   36</span><span class="comment"> * OpenSSL 1.1.1 supports TLS1.3.</span></div>
<div class="line"><a id="l00037" name="l00037"></a><span class="lineno">   37</span><span class="comment"> *</span></div>
<div class="line"><a id="l00038" name="l00038"></a><span class="lineno">   38</span><span class="comment"> * Consequently, this code has to have compile time options to include /</span></div>
<div class="line"><a id="l00039" name="l00039"></a><span class="lineno">   39</span><span class="comment"> * exclude code based on whether compiled against 1.1.0 or 1.1.1, as well as</span></div>
<div class="line"><a id="l00040" name="l00040"></a><span class="lineno">   40</span><span class="comment"> * have additional run time checks.</span></div>
<div class="line"><a id="l00041" name="l00041"></a><span class="lineno">   41</span><span class="comment"> *</span></div>
<div class="line"><a id="l00042" name="l00042"></a><span class="lineno">   42</span><span class="comment"> */</span></div>
<div class="line"><a id="l00043" name="l00043"></a><span class="lineno">   43</span><span class="preprocessor">#include &quot;<a class="code" href="net_8h.html">net.h</a>&quot;</span></div>
<div class="line"><a id="l00044" name="l00044"></a><span class="lineno">   44</span><span class="preprocessor">#include &quot;<a class="code" href="mem_8h.html">mem.h</a>&quot;</span></div>
<div class="line"><a id="l00045" name="l00045"></a><span class="lineno">   45</span><span class="preprocessor">#include &quot;<a class="code" href="coap__debug_8h.html">coap_debug.h</a>&quot;</span></div>
<div class="line"><a id="l00046" name="l00046"></a><span class="lineno">   46</span><span class="preprocessor">#include &quot;<a class="code" href="prng_8h.html">prng.h</a>&quot;</span></div>
<div class="line"><a id="l00047" name="l00047"></a><span class="lineno">   47</span><span class="preprocessor">#include &lt;openssl/ssl.h&gt;</span></div>
<div class="line"><a id="l00048" name="l00048"></a><span class="lineno">   48</span><span class="preprocessor">#include &lt;openssl/err.h&gt;</span></div>
<div class="line"><a id="l00049" name="l00049"></a><span class="lineno">   49</span><span class="preprocessor">#include &lt;openssl/rand.h&gt;</span></div>
<div class="line"><a id="l00050" name="l00050"></a><span class="lineno">   50</span><span class="preprocessor">#include &lt;openssl/hmac.h&gt;</span></div>
<div class="line"><a id="l00051" name="l00051"></a><span class="lineno">   51</span><span class="preprocessor">#include &lt;openssl/x509v3.h&gt;</span></div>
<div class="line"><a id="l00052" name="l00052"></a><span class="lineno">   52</span> </div>
<div class="line"><a id="l00053" name="l00053"></a><span class="lineno">   53</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10100000L</span></div>
<div class="line"><a id="l00054" name="l00054"></a><span class="lineno">   54</span><span class="preprocessor">#error Must be compiled against OpenSSL 1.1.0 or later</span></div>
<div class="line"><a id="l00055" name="l00055"></a><span class="lineno">   55</span><span class="preprocessor">#endif</span></div>
<div class="line"><a id="l00056" name="l00056"></a><span class="lineno">   56</span> </div>
<div class="line"><a id="l00057" name="l00057"></a><span class="lineno">   57</span><span class="preprocessor">#ifdef __GNUC__</span></div>
<div class="line"><a id="l00058" name="l00058"></a><span class="lineno">   58</span><span class="preprocessor">#define UNUSED __attribute__((unused))</span></div>
<div class="line"><a id="l00059" name="l00059"></a><span class="lineno">   59</span><span class="preprocessor">#else</span></div>
<div class="line"><a id="l00060" name="l00060"></a><span class="lineno">   60</span><span class="preprocessor">#define UNUSED</span></div>
<div class="line"><a id="l00061" name="l00061"></a><span class="lineno">   61</span><span class="preprocessor">#endif </span><span class="comment">/* __GNUC__ */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00062" name="l00062"></a><span class="lineno">   62</span> </div>
<div class="line"><a id="l00063" name="l00063"></a><span class="lineno">   63</span><span class="comment">/* RFC6091/RFC7250 */</span></div>
<div class="line"><a id="l00064" name="l00064"></a><span class="lineno">   64</span><span class="preprocessor">#ifndef TLSEXT_TYPE_client_certificate_type</span></div>
<div class="line"><a id="l00065" name="l00065"></a><span class="lineno">   65</span><span class="preprocessor">#define TLSEXT_TYPE_client_certificate_type 19</span></div>
<div class="line"><a id="l00066" name="l00066"></a><span class="lineno">   66</span><span class="preprocessor">#endif</span></div>
<div class="line"><a id="l00067" name="l00067"></a><span class="lineno">   67</span><span class="preprocessor">#ifndef TLSEXT_TYPE_server_certificate_type</span></div>
<div class="line"><a id="l00068" name="l00068"></a><span class="lineno">   68</span><span class="preprocessor">#define TLSEXT_TYPE_server_certificate_type 20</span></div>
<div class="line"><a id="l00069" name="l00069"></a><span class="lineno">   69</span><span class="preprocessor">#endif</span></div>
<div class="line"><a id="l00070" name="l00070"></a><span class="lineno">   70</span> </div>
<div class="line"><a id="l00071" name="l00071"></a><span class="lineno">   71</span><span class="comment">/* This structure encapsulates the OpenSSL context object. */</span></div>
<div class="line"><a id="l00072" name="l00072"></a><span class="lineno">   72</span><span class="keyword">typedef</span> <span class="keyword">struct </span>coap_dtls_context_t {</div>
<div class="line"><a id="l00073" name="l00073"></a><span class="lineno">   73</span>  SSL_CTX *ctx;</div>
<div class="line"><a id="l00074" name="l00074"></a><span class="lineno">   74</span>  SSL *ssl;        <span class="comment">/* OpenSSL object for listening to connection requests */</span></div>
<div class="line"><a id="l00075" name="l00075"></a><span class="lineno">   75</span>  HMAC_CTX *cookie_hmac;</div>
<div class="line"><a id="l00076" name="l00076"></a><span class="lineno">   76</span>  BIO_METHOD *meth;</div>
<div class="line"><a id="l00077" name="l00077"></a><span class="lineno">   77</span>  BIO_ADDR *bio_addr;</div>
<div class="line"><a id="l00078" name="l00078"></a><span class="lineno">   78</span>} coap_dtls_context_t;</div>
<div class="line"><a id="l00079" name="l00079"></a><span class="lineno">   79</span> </div>
<div class="line"><a id="l00080" name="l00080"></a><span class="lineno">   80</span><span class="keyword">typedef</span> <span class="keyword">struct </span>coap_tls_context_t {</div>
<div class="line"><a id="l00081" name="l00081"></a><span class="lineno">   81</span>  SSL_CTX *ctx;</div>
<div class="line"><a id="l00082" name="l00082"></a><span class="lineno">   82</span>  BIO_METHOD *meth;</div>
<div class="line"><a id="l00083" name="l00083"></a><span class="lineno">   83</span>} coap_tls_context_t;</div>
<div class="line"><a id="l00084" name="l00084"></a><span class="lineno">   84</span> </div>
<div class="line"><a id="l00085" name="l00085"></a><span class="lineno">   85</span><span class="preprocessor">#define IS_PSK 0x1</span></div>
<div class="line"><a id="l00086" name="l00086"></a><span class="lineno">   86</span><span class="preprocessor">#define IS_PKI 0x2</span></div>
<div class="line"><a id="l00087" name="l00087"></a><span class="lineno">   87</span> </div>
<div class="line"><a id="l00088" name="l00088"></a><span class="lineno">   88</span><span class="keyword">typedef</span> <span class="keyword">struct </span>sni_entry {</div>
<div class="line"><a id="l00089" name="l00089"></a><span class="lineno">   89</span>  <span class="keywordtype">char</span> *sni;</div>
<div class="line"><a id="l00090" name="l00090"></a><span class="lineno">   90</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l00091" name="l00091"></a><span class="lineno">   91</span>  SSL_CTX *ctx;</div>
<div class="line"><a id="l00092" name="l00092"></a><span class="lineno">   92</span><span class="preprocessor">#else </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00093" name="l00093"></a><span class="lineno">   93</span>  <a class="code hl_struct" href="structcoap__dtls__key__t.html">coap_dtls_key_t</a> pki_key;</div>
<div class="line"><a id="l00094" name="l00094"></a><span class="lineno">   94</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00095" name="l00095"></a><span class="lineno">   95</span>} sni_entry;</div>
<div class="line"><a id="l00096" name="l00096"></a><span class="lineno">   96</span> </div>
<div class="line"><a id="l00097" name="l00097"></a><span class="lineno">   97</span><span class="keyword">typedef</span> <span class="keyword">struct </span>coap_openssl_context_t {</div>
<div class="line"><a id="l00098" name="l00098"></a><span class="lineno">   98</span>  coap_dtls_context_t dtls;</div>
<div class="line"><a id="l00099" name="l00099"></a><span class="lineno">   99</span>  coap_tls_context_t tls;</div>
<div class="line"><a id="l00100" name="l00100"></a><span class="lineno">  100</span>  <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> setup_data;</div>
<div class="line"><a id="l00101" name="l00101"></a><span class="lineno">  101</span>  <span class="keywordtype">int</span> psk_pki_enabled;</div>
<div class="line"><a id="l00102" name="l00102"></a><span class="lineno">  102</span>  <span class="keywordtype">size_t</span> sni_count;</div>
<div class="line"><a id="l00103" name="l00103"></a><span class="lineno">  103</span>  sni_entry *sni_entry_list;</div>
<div class="line"><a id="l00104" name="l00104"></a><span class="lineno">  104</span>} coap_openssl_context_t;</div>
<div class="line"><a id="l00105" name="l00105"></a><span class="lineno">  105</span> </div>
<div class="line"><a id="l00106" name="l00106"></a><span class="lineno">  106</span><span class="keywordtype">int</span> <a class="code hl_function" href="group__dtls.html#ga9def28dc6da3b77c14e89d63769ec085">coap_dtls_is_supported</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l00107" name="l00107"></a><span class="lineno">  107</span>  <span class="keywordflow">if</span> (SSLeay() &lt; 0x10100000L) {</div>
<div class="line"><a id="l00108" name="l00108"></a><span class="lineno">  108</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;OpenSSL version 1.1.0 or later is required\n&quot;</span>);</div>
<div class="line"><a id="l00109" name="l00109"></a><span class="lineno">  109</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00110" name="l00110"></a><span class="lineno">  110</span>  }</div>
<div class="line"><a id="l00111" name="l00111"></a><span class="lineno">  111</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &gt;= 0x10101000L</span></div>
<div class="line"><a id="l00112" name="l00112"></a><span class="lineno">  112</span>  <span class="comment">/*</span></div>
<div class="line"><a id="l00113" name="l00113"></a><span class="lineno">  113</span><span class="comment">   * For 1.1.1, we need to use SSL_CTX_set_client_hello_cb()</span></div>
<div class="line"><a id="l00114" name="l00114"></a><span class="lineno">  114</span><span class="comment">   * which is not in 1.1.0 instead of SSL_CTX_set_tlsext_servername_callback()</span></div>
<div class="line"><a id="l00115" name="l00115"></a><span class="lineno">  115</span><span class="comment">   *</span></div>
<div class="line"><a id="l00116" name="l00116"></a><span class="lineno">  116</span><span class="comment">   * However, there could be a runtime undefined external reference error</span></div>
<div class="line"><a id="l00117" name="l00117"></a><span class="lineno">  117</span><span class="comment">   * as SSL_CTX_set_client_hello_cb() is not there in 1.1.0.</span></div>
<div class="line"><a id="l00118" name="l00118"></a><span class="lineno">  118</span><span class="comment">   */</span></div>
<div class="line"><a id="l00119" name="l00119"></a><span class="lineno">  119</span>  <span class="keywordflow">if</span> (SSLeay() &lt; 0x10101000L) {</div>
<div class="line"><a id="l00120" name="l00120"></a><span class="lineno">  120</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;OpenSSL version 1.1.1 or later is required\n&quot;</span>);</div>
<div class="line"><a id="l00121" name="l00121"></a><span class="lineno">  121</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00122" name="l00122"></a><span class="lineno">  122</span>  }</div>
<div class="line"><a id="l00123" name="l00123"></a><span class="lineno">  123</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00124" name="l00124"></a><span class="lineno">  124</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00125" name="l00125"></a><span class="lineno">  125</span>}</div>
<div class="line"><a id="l00126" name="l00126"></a><span class="lineno">  126</span> </div>
<div class="line"><a id="l00127" name="l00127"></a><span class="lineno">  127</span><span class="keywordtype">int</span> <a class="code hl_function" href="group__dtls.html#ga55b3b545f0784c7a6135021017317e1b">coap_tls_is_supported</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l00128" name="l00128"></a><span class="lineno">  128</span>  <span class="keywordflow">if</span> (SSLeay() &lt; 0x10100000L) {</div>
<div class="line"><a id="l00129" name="l00129"></a><span class="lineno">  129</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;OpenSSL version 1.1.0 or later is required\n&quot;</span>);</div>
<div class="line"><a id="l00130" name="l00130"></a><span class="lineno">  130</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00131" name="l00131"></a><span class="lineno">  131</span>  }</div>
<div class="line"><a id="l00132" name="l00132"></a><span class="lineno">  132</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &gt;= 0x10101000L</span></div>
<div class="line"><a id="l00133" name="l00133"></a><span class="lineno">  133</span>  <span class="keywordflow">if</span> (SSLeay() &lt; 0x10101000L) {</div>
<div class="line"><a id="l00134" name="l00134"></a><span class="lineno">  134</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;OpenSSL version 1.1.1 or later is required\n&quot;</span>);</div>
<div class="line"><a id="l00135" name="l00135"></a><span class="lineno">  135</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00136" name="l00136"></a><span class="lineno">  136</span>  }</div>
<div class="line"><a id="l00137" name="l00137"></a><span class="lineno">  137</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00138" name="l00138"></a><span class="lineno">  138</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00139" name="l00139"></a><span class="lineno">  139</span>}</div>
<div class="line"><a id="l00140" name="l00140"></a><span class="lineno">  140</span> </div>
<div class="line"><a id="l00141" name="l00141"></a><span class="lineno">  141</span><a class="code hl_struct" href="structcoap__tls__version__t.html">coap_tls_version_t</a> *</div>
<div class="line"><a id="l00142" name="l00142"></a><span class="lineno">  142</span><a class="code hl_function" href="group__dtls.html#ga30c05cbcf1ca5320ff0349b59f8c7fcb">coap_get_tls_library_version</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l00143" name="l00143"></a><span class="lineno">  143</span>  <span class="keyword">static</span> <a class="code hl_struct" href="structcoap__tls__version__t.html">coap_tls_version_t</a> version;</div>
<div class="line"><a id="l00144" name="l00144"></a><span class="lineno">  144</span>  version.<a class="code hl_variable" href="structcoap__tls__version__t.html#acd0dcf58914dd79d6110bb4d6a910c58">version</a> = SSLeay();</div>
<div class="line"><a id="l00145" name="l00145"></a><span class="lineno">  145</span>  version.<a class="code hl_variable" href="structcoap__tls__version__t.html#a0a7319dc6fd261d2ce899ac3da26d4c1">built_version</a> = OPENSSL_VERSION_NUMBER;</div>
<div class="line"><a id="l00146" name="l00146"></a><span class="lineno">  146</span>  version.<a class="code hl_variable" href="structcoap__tls__version__t.html#aec97830d2623e4354e12e00467d3dcc2">type</a> = <a class="code hl_define" href="group__dtls.html#ga6de1714f227765ef908b1ab865f77f18">COAP_TLS_LIBRARY_OPENSSL</a>;</div>
<div class="line"><a id="l00147" name="l00147"></a><span class="lineno">  147</span>  <span class="keywordflow">return</span> &amp;version;</div>
<div class="line"><a id="l00148" name="l00148"></a><span class="lineno">  148</span>}</div>
<div class="line"><a id="l00149" name="l00149"></a><span class="lineno">  149</span> </div>
<div class="line"><a id="l00150" name="l00150"></a><span class="lineno">  150</span><span class="keywordtype">void</span> <a class="code hl_function" href="group__dtls__internal.html#ga1e81d904e13ccf3af6a56ab3ebdc8a34">coap_dtls_startup</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l00151" name="l00151"></a><span class="lineno">  151</span>  SSL_load_error_strings();</div>
<div class="line"><a id="l00152" name="l00152"></a><span class="lineno">  152</span>  SSL_library_init();</div>
<div class="line"><a id="l00153" name="l00153"></a><span class="lineno">  153</span>}</div>
<div class="line"><a id="l00154" name="l00154"></a><span class="lineno">  154</span> </div>
<div class="line"><a id="l00155" name="l00155"></a><span class="lineno">  155</span><span class="keyword">static</span> <span class="keywordtype">int</span> <a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> = 0;</div>
<div class="line"><a id="l00156" name="l00156"></a><span class="lineno">  156</span> </div>
<div class="line"><a id="l00157" name="l00157"></a><span class="lineno">  157</span><span class="keywordtype">void</span> <a class="code hl_function" href="group__logging.html#ga2ed215efb94dd270a6d55fb274f62b52">coap_dtls_set_log_level</a>(<span class="keywordtype">int</span> level) {</div>
<div class="line"><a id="l00158" name="l00158"></a><span class="lineno">  158</span>  <a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> = level;</div>
<div class="line"><a id="l00159" name="l00159"></a><span class="lineno">  159</span>}</div>
<div class="line"><a id="l00160" name="l00160"></a><span class="lineno">  160</span> </div>
<div class="line"><a id="l00161" name="l00161"></a><span class="lineno">  161</span><span class="keywordtype">int</span> <a class="code hl_function" href="group__logging.html#gaa57b34084a2baf0b83e7ffea5653ea25">coap_dtls_get_log_level</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l00162" name="l00162"></a><span class="lineno">  162</span>  <span class="keywordflow">return</span> <a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a>;</div>
<div class="line"><a id="l00163" name="l00163"></a><span class="lineno">  163</span>}</div>
<div class="line"><a id="l00164" name="l00164"></a><span class="lineno">  164</span> </div>
<div class="line"><a id="l00165" name="l00165"></a><span class="lineno">  165</span><span class="keyword">typedef</span> <span class="keyword">struct </span>coap_ssl_st {</div>
<div class="line"><a id="l00166" name="l00166"></a><span class="lineno">  166</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session;</div>
<div class="line"><a id="l00167" name="l00167"></a><span class="lineno">  167</span>  <span class="keyword">const</span> <span class="keywordtype">void</span> *pdu;</div>
<div class="line"><a id="l00168" name="l00168"></a><span class="lineno">  168</span>  <span class="keywordtype">unsigned</span> pdu_len;</div>
<div class="line"><a id="l00169" name="l00169"></a><span class="lineno">  169</span>  <span class="keywordtype">unsigned</span> peekmode;</div>
<div class="line"><a id="l00170" name="l00170"></a><span class="lineno">  170</span>  <a class="code hl_typedef" href="group__clock.html#ga97ff1502e211b4ee6c3f15a598833438">coap_tick_t</a> timeout;</div>
<div class="line"><a id="l00171" name="l00171"></a><span class="lineno">  171</span>} coap_ssl_data;</div>
<div class="line"><a id="l00172" name="l00172"></a><span class="lineno">  172</span> </div>
<div class="line"><a id="l00173" name="l00173"></a><span class="lineno">  173</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dgram_create(BIO *a) {</div>
<div class="line"><a id="l00174" name="l00174"></a><span class="lineno">  174</span>  coap_ssl_data *data = NULL;</div>
<div class="line"><a id="l00175" name="l00175"></a><span class="lineno">  175</span>  data = malloc(<span class="keyword">sizeof</span>(coap_ssl_data));</div>
<div class="line"><a id="l00176" name="l00176"></a><span class="lineno">  176</span>  <span class="keywordflow">if</span> (data == NULL)</div>
<div class="line"><a id="l00177" name="l00177"></a><span class="lineno">  177</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00178" name="l00178"></a><span class="lineno">  178</span>  BIO_set_init(a, 1);</div>
<div class="line"><a id="l00179" name="l00179"></a><span class="lineno">  179</span>  BIO_set_data(a, data);</div>
<div class="line"><a id="l00180" name="l00180"></a><span class="lineno">  180</span>  memset(data, 0x00, <span class="keyword">sizeof</span>(coap_ssl_data));</div>
<div class="line"><a id="l00181" name="l00181"></a><span class="lineno">  181</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00182" name="l00182"></a><span class="lineno">  182</span>}</div>
<div class="line"><a id="l00183" name="l00183"></a><span class="lineno">  183</span> </div>
<div class="line"><a id="l00184" name="l00184"></a><span class="lineno">  184</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dgram_destroy(BIO *a) {</div>
<div class="line"><a id="l00185" name="l00185"></a><span class="lineno">  185</span>  coap_ssl_data *data;</div>
<div class="line"><a id="l00186" name="l00186"></a><span class="lineno">  186</span>  <span class="keywordflow">if</span> (a == NULL)</div>
<div class="line"><a id="l00187" name="l00187"></a><span class="lineno">  187</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00188" name="l00188"></a><span class="lineno">  188</span>  data = (coap_ssl_data *)BIO_get_data(a);</div>
<div class="line"><a id="l00189" name="l00189"></a><span class="lineno">  189</span>  <span class="keywordflow">if</span> (data != NULL)</div>
<div class="line"><a id="l00190" name="l00190"></a><span class="lineno">  190</span>    free(data);</div>
<div class="line"><a id="l00191" name="l00191"></a><span class="lineno">  191</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00192" name="l00192"></a><span class="lineno">  192</span>}</div>
<div class="line"><a id="l00193" name="l00193"></a><span class="lineno">  193</span> </div>
<div class="line"><a id="l00194" name="l00194"></a><span class="lineno">  194</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dgram_read(BIO *a, <span class="keywordtype">char</span> *out, <span class="keywordtype">int</span> outl) {</div>
<div class="line"><a id="l00195" name="l00195"></a><span class="lineno">  195</span>  <span class="keywordtype">int</span> ret = 0;</div>
<div class="line"><a id="l00196" name="l00196"></a><span class="lineno">  196</span>  coap_ssl_data *data = (coap_ssl_data *)BIO_get_data(a);</div>
<div class="line"><a id="l00197" name="l00197"></a><span class="lineno">  197</span> </div>
<div class="line"><a id="l00198" name="l00198"></a><span class="lineno">  198</span>  <span class="keywordflow">if</span> (out != NULL) {</div>
<div class="line"><a id="l00199" name="l00199"></a><span class="lineno">  199</span>    <span class="keywordflow">if</span> (data != NULL &amp;&amp; data-&gt;pdu_len &gt; 0) {</div>
<div class="line"><a id="l00200" name="l00200"></a><span class="lineno">  200</span>      <span class="keywordflow">if</span> (outl &lt; (<span class="keywordtype">int</span>)data-&gt;pdu_len) {</div>
<div class="line"><a id="l00201" name="l00201"></a><span class="lineno">  201</span>        memcpy(out, data-&gt;pdu, outl);</div>
<div class="line"><a id="l00202" name="l00202"></a><span class="lineno">  202</span>        ret = outl;</div>
<div class="line"><a id="l00203" name="l00203"></a><span class="lineno">  203</span>      } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00204" name="l00204"></a><span class="lineno">  204</span>        memcpy(out, data-&gt;pdu, data-&gt;pdu_len);</div>
<div class="line"><a id="l00205" name="l00205"></a><span class="lineno">  205</span>        ret = (int)data-&gt;pdu_len;</div>
<div class="line"><a id="l00206" name="l00206"></a><span class="lineno">  206</span>      }</div>
<div class="line"><a id="l00207" name="l00207"></a><span class="lineno">  207</span>      <span class="keywordflow">if</span> (!data-&gt;peekmode) {</div>
<div class="line"><a id="l00208" name="l00208"></a><span class="lineno">  208</span>        data-&gt;pdu_len = 0;</div>
<div class="line"><a id="l00209" name="l00209"></a><span class="lineno">  209</span>        data-&gt;pdu = NULL;</div>
<div class="line"><a id="l00210" name="l00210"></a><span class="lineno">  210</span>      }</div>
<div class="line"><a id="l00211" name="l00211"></a><span class="lineno">  211</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00212" name="l00212"></a><span class="lineno">  212</span>      ret = -1;</div>
<div class="line"><a id="l00213" name="l00213"></a><span class="lineno">  213</span>    }</div>
<div class="line"><a id="l00214" name="l00214"></a><span class="lineno">  214</span>    BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00215" name="l00215"></a><span class="lineno">  215</span>    <span class="keywordflow">if</span> (ret &lt; 0)</div>
<div class="line"><a id="l00216" name="l00216"></a><span class="lineno">  216</span>      BIO_set_retry_read(a);</div>
<div class="line"><a id="l00217" name="l00217"></a><span class="lineno">  217</span>  }</div>
<div class="line"><a id="l00218" name="l00218"></a><span class="lineno">  218</span>  <span class="keywordflow">return</span> ret;</div>
<div class="line"><a id="l00219" name="l00219"></a><span class="lineno">  219</span>}</div>
<div class="line"><a id="l00220" name="l00220"></a><span class="lineno">  220</span> </div>
<div class="line"><a id="l00221" name="l00221"></a><span class="lineno">  221</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dgram_write(BIO *a, <span class="keyword">const</span> <span class="keywordtype">char</span> *in, <span class="keywordtype">int</span> inl) {</div>
<div class="line"><a id="l00222" name="l00222"></a><span class="lineno">  222</span>  <span class="keywordtype">int</span> ret = 0;</div>
<div class="line"><a id="l00223" name="l00223"></a><span class="lineno">  223</span>  coap_ssl_data *data = (coap_ssl_data *)BIO_get_data(a);</div>
<div class="line"><a id="l00224" name="l00224"></a><span class="lineno">  224</span> </div>
<div class="line"><a id="l00225" name="l00225"></a><span class="lineno">  225</span>  <span class="keywordflow">if</span> (data-&gt;session) {</div>
<div class="line"><a id="l00226" name="l00226"></a><span class="lineno">  226</span>    <span class="keywordflow">if</span> (data-&gt;session-&gt;sock.flags == <a class="code hl_define" href="coap__io_8h.html#af88ca6b7683ad462a6187ccda018f75e">COAP_SOCKET_EMPTY</a> &amp;&amp; data-&gt;session-&gt;endpoint == NULL) {</div>
<div class="line"><a id="l00227" name="l00227"></a><span class="lineno">  227</span>      <span class="comment">/* socket was closed on client due to error */</span></div>
<div class="line"><a id="l00228" name="l00228"></a><span class="lineno">  228</span>      BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00229" name="l00229"></a><span class="lineno">  229</span>      <span class="keywordflow">return</span> -1;</div>
<div class="line"><a id="l00230" name="l00230"></a><span class="lineno">  230</span>    }</div>
<div class="line"><a id="l00231" name="l00231"></a><span class="lineno">  231</span>    ret = (int)<a class="code hl_function" href="coap__session_8c.html#a43ad12697cacde3be9579f8253ca9ccf">coap_session_send</a>(data-&gt;session, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *)in, (size_t)inl);</div>
<div class="line"><a id="l00232" name="l00232"></a><span class="lineno">  232</span>    BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00233" name="l00233"></a><span class="lineno">  233</span>    <span class="keywordflow">if</span> (ret &lt;= 0)</div>
<div class="line"><a id="l00234" name="l00234"></a><span class="lineno">  234</span>      BIO_set_retry_write(a);</div>
<div class="line"><a id="l00235" name="l00235"></a><span class="lineno">  235</span>  } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00236" name="l00236"></a><span class="lineno">  236</span>    BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00237" name="l00237"></a><span class="lineno">  237</span>    ret = -1;</div>
<div class="line"><a id="l00238" name="l00238"></a><span class="lineno">  238</span>  }</div>
<div class="line"><a id="l00239" name="l00239"></a><span class="lineno">  239</span>  <span class="keywordflow">return</span> ret;</div>
<div class="line"><a id="l00240" name="l00240"></a><span class="lineno">  240</span>}</div>
<div class="line"><a id="l00241" name="l00241"></a><span class="lineno">  241</span> </div>
<div class="line"><a id="l00242" name="l00242"></a><span class="lineno">  242</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dgram_puts(BIO *a, <span class="keyword">const</span> <span class="keywordtype">char</span> *pstr) {</div>
<div class="line"><a id="l00243" name="l00243"></a><span class="lineno">  243</span>  <span class="keywordflow">return</span> coap_dgram_write(a, pstr, (<span class="keywordtype">int</span>)strlen(pstr));</div>
<div class="line"><a id="l00244" name="l00244"></a><span class="lineno">  244</span>}</div>
<div class="line"><a id="l00245" name="l00245"></a><span class="lineno">  245</span> </div>
<div class="line"><a id="l00246" name="l00246"></a><span class="lineno">  246</span><span class="keyword">static</span> <span class="keywordtype">long</span> coap_dgram_ctrl(BIO *a, <span class="keywordtype">int</span> cmd, <span class="keywordtype">long</span> num, <span class="keywordtype">void</span> *ptr) {</div>
<div class="line"><a id="l00247" name="l00247"></a><span class="lineno">  247</span>  <span class="keywordtype">long</span> ret = 1;</div>
<div class="line"><a id="l00248" name="l00248"></a><span class="lineno">  248</span>  coap_ssl_data *data = BIO_get_data(a);</div>
<div class="line"><a id="l00249" name="l00249"></a><span class="lineno">  249</span> </div>
<div class="line"><a id="l00250" name="l00250"></a><span class="lineno">  250</span>  (void)ptr;</div>
<div class="line"><a id="l00251" name="l00251"></a><span class="lineno">  251</span> </div>
<div class="line"><a id="l00252" name="l00252"></a><span class="lineno">  252</span>  <span class="keywordflow">switch</span> (cmd) {</div>
<div class="line"><a id="l00253" name="l00253"></a><span class="lineno">  253</span>  <span class="keywordflow">case</span> BIO_CTRL_GET_CLOSE:</div>
<div class="line"><a id="l00254" name="l00254"></a><span class="lineno">  254</span>    ret = BIO_get_shutdown(a);</div>
<div class="line"><a id="l00255" name="l00255"></a><span class="lineno">  255</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00256" name="l00256"></a><span class="lineno">  256</span>  <span class="keywordflow">case</span> BIO_CTRL_SET_CLOSE:</div>
<div class="line"><a id="l00257" name="l00257"></a><span class="lineno">  257</span>    BIO_set_shutdown(a, (<span class="keywordtype">int</span>)num);</div>
<div class="line"><a id="l00258" name="l00258"></a><span class="lineno">  258</span>    ret = 1;</div>
<div class="line"><a id="l00259" name="l00259"></a><span class="lineno">  259</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00260" name="l00260"></a><span class="lineno">  260</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_PEEK_MODE:</div>
<div class="line"><a id="l00261" name="l00261"></a><span class="lineno">  261</span>    data-&gt;peekmode = (unsigned)num;</div>
<div class="line"><a id="l00262" name="l00262"></a><span class="lineno">  262</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00263" name="l00263"></a><span class="lineno">  263</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_CONNECT:</div>
<div class="line"><a id="l00264" name="l00264"></a><span class="lineno">  264</span>  <span class="keywordflow">case</span> BIO_C_SET_FD:</div>
<div class="line"><a id="l00265" name="l00265"></a><span class="lineno">  265</span>  <span class="keywordflow">case</span> BIO_C_GET_FD:</div>
<div class="line"><a id="l00266" name="l00266"></a><span class="lineno">  266</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_DONT_FRAG:</div>
<div class="line"><a id="l00267" name="l00267"></a><span class="lineno">  267</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_MTU:</div>
<div class="line"><a id="l00268" name="l00268"></a><span class="lineno">  268</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_MTU:</div>
<div class="line"><a id="l00269" name="l00269"></a><span class="lineno">  269</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_QUERY_MTU:</div>
<div class="line"><a id="l00270" name="l00270"></a><span class="lineno">  270</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_FALLBACK_MTU:</div>
<div class="line"><a id="l00271" name="l00271"></a><span class="lineno">  271</span>    ret = -1;</div>
<div class="line"><a id="l00272" name="l00272"></a><span class="lineno">  272</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00273" name="l00273"></a><span class="lineno">  273</span>  <span class="keywordflow">case</span> BIO_CTRL_DUP:</div>
<div class="line"><a id="l00274" name="l00274"></a><span class="lineno">  274</span>  <span class="keywordflow">case</span> BIO_CTRL_FLUSH:</div>
<div class="line"><a id="l00275" name="l00275"></a><span class="lineno">  275</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_MTU_DISCOVER:</div>
<div class="line"><a id="l00276" name="l00276"></a><span class="lineno">  276</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_CONNECTED:</div>
<div class="line"><a id="l00277" name="l00277"></a><span class="lineno">  277</span>    ret = 1;</div>
<div class="line"><a id="l00278" name="l00278"></a><span class="lineno">  278</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00279" name="l00279"></a><span class="lineno">  279</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_NEXT_TIMEOUT:</div>
<div class="line"><a id="l00280" name="l00280"></a><span class="lineno">  280</span>    data-&gt;timeout = <a class="code hl_function" href="group__clock.html#ga0e2d5d4667e8b7a44c375cdb378b8d1b">coap_ticks_from_rt_us</a>((uint64_t)((<span class="keyword">struct</span> timeval*)ptr)-&gt;tv_sec * 1000000 + ((<span class="keyword">struct</span> timeval*)ptr)-&gt;tv_usec);</div>
<div class="line"><a id="l00281" name="l00281"></a><span class="lineno">  281</span>    ret = 1;</div>
<div class="line"><a id="l00282" name="l00282"></a><span class="lineno">  282</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00283" name="l00283"></a><span class="lineno">  283</span>  <span class="keywordflow">case</span> BIO_CTRL_RESET:</div>
<div class="line"><a id="l00284" name="l00284"></a><span class="lineno">  284</span>  <span class="keywordflow">case</span> BIO_C_FILE_SEEK:</div>
<div class="line"><a id="l00285" name="l00285"></a><span class="lineno">  285</span>  <span class="keywordflow">case</span> BIO_C_FILE_TELL:</div>
<div class="line"><a id="l00286" name="l00286"></a><span class="lineno">  286</span>  <span class="keywordflow">case</span> BIO_CTRL_INFO:</div>
<div class="line"><a id="l00287" name="l00287"></a><span class="lineno">  287</span>  <span class="keywordflow">case</span> BIO_CTRL_PENDING:</div>
<div class="line"><a id="l00288" name="l00288"></a><span class="lineno">  288</span>  <span class="keywordflow">case</span> BIO_CTRL_WPENDING:</div>
<div class="line"><a id="l00289" name="l00289"></a><span class="lineno">  289</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_PEER:</div>
<div class="line"><a id="l00290" name="l00290"></a><span class="lineno">  290</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_PEER:</div>
<div class="line"><a id="l00291" name="l00291"></a><span class="lineno">  291</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_RECV_TIMEOUT:</div>
<div class="line"><a id="l00292" name="l00292"></a><span class="lineno">  292</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_RECV_TIMEOUT:</div>
<div class="line"><a id="l00293" name="l00293"></a><span class="lineno">  293</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_SET_SEND_TIMEOUT:</div>
<div class="line"><a id="l00294" name="l00294"></a><span class="lineno">  294</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_SEND_TIMEOUT:</div>
<div class="line"><a id="l00295" name="l00295"></a><span class="lineno">  295</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_SEND_TIMER_EXP:</div>
<div class="line"><a id="l00296" name="l00296"></a><span class="lineno">  296</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_RECV_TIMER_EXP:</div>
<div class="line"><a id="l00297" name="l00297"></a><span class="lineno">  297</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_MTU_EXCEEDED:</div>
<div class="line"><a id="l00298" name="l00298"></a><span class="lineno">  298</span>  <span class="keywordflow">case</span> BIO_CTRL_DGRAM_GET_MTU_OVERHEAD:</div>
<div class="line"><a id="l00299" name="l00299"></a><span class="lineno">  299</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l00300" name="l00300"></a><span class="lineno">  300</span>    ret = 0;</div>
<div class="line"><a id="l00301" name="l00301"></a><span class="lineno">  301</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00302" name="l00302"></a><span class="lineno">  302</span>  }</div>
<div class="line"><a id="l00303" name="l00303"></a><span class="lineno">  303</span>  <span class="keywordflow">return</span> ret;</div>
<div class="line"><a id="l00304" name="l00304"></a><span class="lineno">  304</span>}</div>
<div class="line"><a id="l00305" name="l00305"></a><span class="lineno">  305</span> </div>
<div class="line"><a id="l00306" name="l00306"></a><span class="lineno">  306</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dtls_generate_cookie(SSL *ssl, <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *cookie, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> *cookie_len) {</div>
<div class="line"><a id="l00307" name="l00307"></a><span class="lineno">  307</span>  coap_dtls_context_t *dtls = (coap_dtls_context_t *)SSL_CTX_get_app_data(SSL_get_SSL_CTX(ssl));</div>
<div class="line"><a id="l00308" name="l00308"></a><span class="lineno">  308</span>  coap_ssl_data *data = (coap_ssl_data*)BIO_get_data(SSL_get_rbio(ssl));</div>
<div class="line"><a id="l00309" name="l00309"></a><span class="lineno">  309</span>  <span class="keywordtype">int</span> r = HMAC_Init_ex(dtls-&gt;cookie_hmac, NULL, 0, NULL, NULL);</div>
<div class="line"><a id="l00310" name="l00310"></a><span class="lineno">  310</span>  r &amp;= HMAC_Update(dtls-&gt;cookie_hmac, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)&amp;data-&gt;session-&gt;local_addr.addr, (<span class="keywordtype">size_t</span>)data-&gt;session-&gt;local_addr.size);</div>
<div class="line"><a id="l00311" name="l00311"></a><span class="lineno">  311</span>  r &amp;= HMAC_Update(dtls-&gt;cookie_hmac, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)&amp;data-&gt;session-&gt;remote_addr.addr, (<span class="keywordtype">size_t</span>)data-&gt;session-&gt;remote_addr.size);</div>
<div class="line"><a id="l00312" name="l00312"></a><span class="lineno">  312</span>  r &amp;= HMAC_Final(dtls-&gt;cookie_hmac, cookie, cookie_len);</div>
<div class="line"><a id="l00313" name="l00313"></a><span class="lineno">  313</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l00314" name="l00314"></a><span class="lineno">  314</span>}</div>
<div class="line"><a id="l00315" name="l00315"></a><span class="lineno">  315</span> </div>
<div class="line"><a id="l00316" name="l00316"></a><span class="lineno">  316</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_dtls_verify_cookie(SSL *ssl, <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *cookie, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> cookie_len) {</div>
<div class="line"><a id="l00317" name="l00317"></a><span class="lineno">  317</span>  <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> hmac[32];</div>
<div class="line"><a id="l00318" name="l00318"></a><span class="lineno">  318</span>  <span class="keywordtype">unsigned</span> len = 32;</div>
<div class="line"><a id="l00319" name="l00319"></a><span class="lineno">  319</span>  <span class="keywordflow">if</span> (coap_dtls_generate_cookie(ssl, hmac, &amp;len) &amp;&amp; cookie_len == len &amp;&amp; memcmp(cookie, hmac, len) == 0)</div>
<div class="line"><a id="l00320" name="l00320"></a><span class="lineno">  320</span>    <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00321" name="l00321"></a><span class="lineno">  321</span>  <span class="keywordflow">else</span></div>
<div class="line"><a id="l00322" name="l00322"></a><span class="lineno">  322</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00323" name="l00323"></a><span class="lineno">  323</span>}</div>
<div class="line"><a id="l00324" name="l00324"></a><span class="lineno">  324</span> </div>
<div class="line"><a id="l00325" name="l00325"></a><span class="lineno">  325</span><span class="keyword">static</span> <span class="keywordtype">unsigned</span> coap_dtls_psk_client_callback(SSL *ssl, <span class="keyword">const</span> <span class="keywordtype">char</span> *hint, <span class="keywordtype">char</span> *identity, <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> max_identity_len, <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *buf, <span class="keywordtype">unsigned</span> max_len) {</div>
<div class="line"><a id="l00326" name="l00326"></a><span class="lineno">  326</span>  <span class="keywordtype">size_t</span> hint_len = 0, identity_len = 0, psk_len;</div>
<div class="line"><a id="l00327" name="l00327"></a><span class="lineno">  327</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a>*)SSL_get_app_data(ssl);</div>
<div class="line"><a id="l00328" name="l00328"></a><span class="lineno">  328</span> </div>
<div class="line"><a id="l00329" name="l00329"></a><span class="lineno">  329</span>  <span class="keywordflow">if</span> (hint)</div>
<div class="line"><a id="l00330" name="l00330"></a><span class="lineno">  330</span>    hint_len = strlen(hint);</div>
<div class="line"><a id="l00331" name="l00331"></a><span class="lineno">  331</span>  <span class="keywordflow">else</span></div>
<div class="line"><a id="l00332" name="l00332"></a><span class="lineno">  332</span>    hint = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l00333" name="l00333"></a><span class="lineno">  333</span> </div>
<div class="line"><a id="l00334" name="l00334"></a><span class="lineno">  334</span>  <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;got psk_identity_hint: &#39;%.*s&#39;\n&quot;</span>, (<span class="keywordtype">int</span>)hint_len, hint);</div>
<div class="line"><a id="l00335" name="l00335"></a><span class="lineno">  335</span> </div>
<div class="line"><a id="l00336" name="l00336"></a><span class="lineno">  336</span>  <span class="keywordflow">if</span> (session == NULL || session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a> == NULL || session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ae412c9932b9ced3c778d6029d21493c7">get_client_psk</a> == NULL)</div>
<div class="line"><a id="l00337" name="l00337"></a><span class="lineno">  337</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00338" name="l00338"></a><span class="lineno">  338</span> </div>
<div class="line"><a id="l00339" name="l00339"></a><span class="lineno">  339</span>  psk_len = session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ae412c9932b9ced3c778d6029d21493c7">get_client_psk</a>(session, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)hint, hint_len, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)identity, &amp;identity_len, max_identity_len - 1, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)buf, max_len);</div>
<div class="line"><a id="l00340" name="l00340"></a><span class="lineno">  340</span>  <span class="keywordflow">if</span> (identity_len &lt; max_identity_len)</div>
<div class="line"><a id="l00341" name="l00341"></a><span class="lineno">  341</span>    identity[identity_len] = 0;</div>
<div class="line"><a id="l00342" name="l00342"></a><span class="lineno">  342</span>  <span class="keywordflow">return</span> (<span class="keywordtype">unsigned</span>)psk_len;</div>
<div class="line"><a id="l00343" name="l00343"></a><span class="lineno">  343</span>}</div>
<div class="line"><a id="l00344" name="l00344"></a><span class="lineno">  344</span> </div>
<div class="line"><a id="l00345" name="l00345"></a><span class="lineno">  345</span><span class="keyword">static</span> <span class="keywordtype">unsigned</span> coap_dtls_psk_server_callback(SSL *ssl, <span class="keyword">const</span> <span class="keywordtype">char</span> *identity, <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *buf, <span class="keywordtype">unsigned</span> max_len) {</div>
<div class="line"><a id="l00346" name="l00346"></a><span class="lineno">  346</span>  <span class="keywordtype">size_t</span> identity_len = 0;</div>
<div class="line"><a id="l00347" name="l00347"></a><span class="lineno">  347</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a>*)SSL_get_app_data(ssl);</div>
<div class="line"><a id="l00348" name="l00348"></a><span class="lineno">  348</span> </div>
<div class="line"><a id="l00349" name="l00349"></a><span class="lineno">  349</span>  <span class="keywordflow">if</span> (identity)</div>
<div class="line"><a id="l00350" name="l00350"></a><span class="lineno">  350</span>    identity_len = strlen(identity);</div>
<div class="line"><a id="l00351" name="l00351"></a><span class="lineno">  351</span>  <span class="keywordflow">else</span></div>
<div class="line"><a id="l00352" name="l00352"></a><span class="lineno">  352</span>    identity = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l00353" name="l00353"></a><span class="lineno">  353</span> </div>
<div class="line"><a id="l00354" name="l00354"></a><span class="lineno">  354</span>  <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;got psk_identity: &#39;%.*s&#39;\n&quot;</span>,</div>
<div class="line"><a id="l00355" name="l00355"></a><span class="lineno">  355</span>           (<span class="keywordtype">int</span>)identity_len, identity);</div>
<div class="line"><a id="l00356" name="l00356"></a><span class="lineno">  356</span> </div>
<div class="line"><a id="l00357" name="l00357"></a><span class="lineno">  357</span>  <span class="keywordflow">if</span> (session == NULL || session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a> == NULL || session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a71aa494865b061f72ec0ecd633aa4e7f">get_server_psk</a> == NULL)</div>
<div class="line"><a id="l00358" name="l00358"></a><span class="lineno">  358</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00359" name="l00359"></a><span class="lineno">  359</span> </div>
<div class="line"><a id="l00360" name="l00360"></a><span class="lineno">  360</span>  <span class="keywordflow">return</span> (<span class="keywordtype">unsigned</span>)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a71aa494865b061f72ec0ecd633aa4e7f">get_server_psk</a>(session, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)identity, identity_len, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)buf, max_len);</div>
<div class="line"><a id="l00361" name="l00361"></a><span class="lineno">  361</span>}</div>
<div class="line"><a id="l00362" name="l00362"></a><span class="lineno">  362</span> </div>
<div class="line"><a id="l00363" name="l00363"></a><span class="lineno">  363</span><span class="keyword">static</span> <span class="keywordtype">void</span> coap_dtls_info_callback(<span class="keyword">const</span> SSL *ssl, <span class="keywordtype">int</span> where, <span class="keywordtype">int</span> ret) {</div>
<div class="line"><a id="l00364" name="l00364"></a><span class="lineno">  364</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a>*)SSL_get_app_data(ssl);</div>
<div class="line"><a id="l00365" name="l00365"></a><span class="lineno">  365</span>  <span class="keyword">const</span> <span class="keywordtype">char</span> *pstr;</div>
<div class="line"><a id="l00366" name="l00366"></a><span class="lineno">  366</span>  <span class="keywordtype">int</span> w = where &amp;~SSL_ST_MASK;</div>
<div class="line"><a id="l00367" name="l00367"></a><span class="lineno">  367</span> </div>
<div class="line"><a id="l00368" name="l00368"></a><span class="lineno">  368</span>  <span class="keywordflow">if</span> (w &amp; SSL_ST_CONNECT)</div>
<div class="line"><a id="l00369" name="l00369"></a><span class="lineno">  369</span>    pstr = <span class="stringliteral">&quot;SSL_connect&quot;</span>;</div>
<div class="line"><a id="l00370" name="l00370"></a><span class="lineno">  370</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (w &amp; SSL_ST_ACCEPT)</div>
<div class="line"><a id="l00371" name="l00371"></a><span class="lineno">  371</span>    pstr = <span class="stringliteral">&quot;SSL_accept&quot;</span>;</div>
<div class="line"><a id="l00372" name="l00372"></a><span class="lineno">  372</span>  <span class="keywordflow">else</span></div>
<div class="line"><a id="l00373" name="l00373"></a><span class="lineno">  373</span>    pstr = <span class="stringliteral">&quot;undefined&quot;</span>;</div>
<div class="line"><a id="l00374" name="l00374"></a><span class="lineno">  374</span> </div>
<div class="line"><a id="l00375" name="l00375"></a><span class="lineno">  375</span>  <span class="keywordflow">if</span> (where &amp; SSL_CB_LOOP) {</div>
<div class="line"><a id="l00376" name="l00376"></a><span class="lineno">  376</span>    <span class="keywordflow">if</span> (<a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> &gt;= <a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>)</div>
<div class="line"><a id="l00377" name="l00377"></a><span class="lineno">  377</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;*  %s: %s:%s\n&quot;</span>,</div>
<div class="line"><a id="l00378" name="l00378"></a><span class="lineno">  378</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session), pstr, SSL_state_string_long(ssl));</div>
<div class="line"><a id="l00379" name="l00379"></a><span class="lineno">  379</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (where &amp; SSL_CB_ALERT) {</div>
<div class="line"><a id="l00380" name="l00380"></a><span class="lineno">  380</span>    pstr = (where &amp; SSL_CB_READ) ? <span class="stringliteral">&quot;read&quot;</span> : <span class="stringliteral">&quot;write&quot;</span>;</div>
<div class="line"><a id="l00381" name="l00381"></a><span class="lineno">  381</span>    <span class="keywordflow">if</span> (<a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> &gt;= <a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a6e98ff471e3ce6c4ef2d75c37ee51837">LOG_INFO</a>)</div>
<div class="line"><a id="l00382" name="l00382"></a><span class="lineno">  382</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a6e98ff471e3ce6c4ef2d75c37ee51837">LOG_INFO</a>, <span class="stringliteral">&quot;*  %s: SSL3 alert %s:%s:%s\n&quot;</span>,</div>
<div class="line"><a id="l00383" name="l00383"></a><span class="lineno">  383</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session),</div>
<div class="line"><a id="l00384" name="l00384"></a><span class="lineno">  384</span>               pstr,</div>
<div class="line"><a id="l00385" name="l00385"></a><span class="lineno">  385</span>               SSL_alert_type_string_long(ret),</div>
<div class="line"><a id="l00386" name="l00386"></a><span class="lineno">  386</span>               SSL_alert_desc_string_long(ret));</div>
<div class="line"><a id="l00387" name="l00387"></a><span class="lineno">  387</span>    <span class="keywordflow">if</span> ((where &amp; (SSL_CB_WRITE|SSL_CB_READ)) &amp;&amp; (ret &gt;&gt; 8) == SSL3_AL_FATAL)</div>
<div class="line"><a id="l00388" name="l00388"></a><span class="lineno">  388</span>      session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a>;</div>
<div class="line"><a id="l00389" name="l00389"></a><span class="lineno">  389</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (where &amp; SSL_CB_EXIT) {</div>
<div class="line"><a id="l00390" name="l00390"></a><span class="lineno">  390</span>    <span class="keywordflow">if</span> (ret == 0) {</div>
<div class="line"><a id="l00391" name="l00391"></a><span class="lineno">  391</span>      <span class="keywordflow">if</span> (<a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> &gt;= <a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>) {</div>
<div class="line"><a id="l00392" name="l00392"></a><span class="lineno">  392</span>        <span class="keywordtype">unsigned</span> <span class="keywordtype">long</span> e;</div>
<div class="line"><a id="l00393" name="l00393"></a><span class="lineno">  393</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;*  %s: %s:failed in %s\n&quot;</span>,</div>
<div class="line"><a id="l00394" name="l00394"></a><span class="lineno">  394</span>                 <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session), pstr, SSL_state_string_long(ssl));</div>
<div class="line"><a id="l00395" name="l00395"></a><span class="lineno">  395</span>        <span class="keywordflow">while</span> ((e = ERR_get_error()))</div>
<div class="line"><a id="l00396" name="l00396"></a><span class="lineno">  396</span>          <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;*  %s:   %s at %s:%s\n&quot;</span>,</div>
<div class="line"><a id="l00397" name="l00397"></a><span class="lineno">  397</span>                   <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session), ERR_reason_error_string(e),</div>
<div class="line"><a id="l00398" name="l00398"></a><span class="lineno">  398</span>                   ERR_lib_error_string(e), ERR_func_error_string(e));</div>
<div class="line"><a id="l00399" name="l00399"></a><span class="lineno">  399</span>      }</div>
<div class="line"><a id="l00400" name="l00400"></a><span class="lineno">  400</span>    } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (ret &lt; 0) {</div>
<div class="line"><a id="l00401" name="l00401"></a><span class="lineno">  401</span>      <span class="keywordflow">if</span> (<a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> &gt;= <a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>) {</div>
<div class="line"><a id="l00402" name="l00402"></a><span class="lineno">  402</span>        <span class="keywordtype">int</span> err = SSL_get_error(ssl, ret);</div>
<div class="line"><a id="l00403" name="l00403"></a><span class="lineno">  403</span>        <span class="keywordflow">if</span> (err != SSL_ERROR_WANT_READ &amp;&amp; err != SSL_ERROR_WANT_WRITE &amp;&amp; err != SSL_ERROR_WANT_CONNECT &amp;&amp; err != SSL_ERROR_WANT_ACCEPT &amp;&amp; err != SSL_ERROR_WANT_X509_LOOKUP) {</div>
<div class="line"><a id="l00404" name="l00404"></a><span class="lineno">  404</span>          <span class="keywordtype">long</span> e;</div>
<div class="line"><a id="l00405" name="l00405"></a><span class="lineno">  405</span>          <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;*  %s: %s:error in %s\n&quot;</span>,</div>
<div class="line"><a id="l00406" name="l00406"></a><span class="lineno">  406</span>                   <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session), pstr, SSL_state_string_long(ssl));</div>
<div class="line"><a id="l00407" name="l00407"></a><span class="lineno">  407</span>          <span class="keywordflow">while</span> ((e = ERR_get_error()))</div>
<div class="line"><a id="l00408" name="l00408"></a><span class="lineno">  408</span>            <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;*  %s: %s at %s:%s\n&quot;</span>,</div>
<div class="line"><a id="l00409" name="l00409"></a><span class="lineno">  409</span>                     <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session), ERR_reason_error_string(e),</div>
<div class="line"><a id="l00410" name="l00410"></a><span class="lineno">  410</span>                     ERR_lib_error_string(e), ERR_func_error_string(e));</div>
<div class="line"><a id="l00411" name="l00411"></a><span class="lineno">  411</span>        }</div>
<div class="line"><a id="l00412" name="l00412"></a><span class="lineno">  412</span>      }</div>
<div class="line"><a id="l00413" name="l00413"></a><span class="lineno">  413</span>    }</div>
<div class="line"><a id="l00414" name="l00414"></a><span class="lineno">  414</span>  }</div>
<div class="line"><a id="l00415" name="l00415"></a><span class="lineno">  415</span> </div>
<div class="line"><a id="l00416" name="l00416"></a><span class="lineno">  416</span>  <span class="keywordflow">if</span> (where == SSL_CB_HANDSHAKE_START &amp;&amp; SSL_get_state(ssl) == TLS_ST_OK)</div>
<div class="line"><a id="l00417" name="l00417"></a><span class="lineno">  417</span>    session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga367c24eff1326e0e3f8bd1d7dcd5363a">COAP_EVENT_DTLS_RENEGOTIATE</a>;</div>
<div class="line"><a id="l00418" name="l00418"></a><span class="lineno">  418</span>}</div>
<div class="line"><a id="l00419" name="l00419"></a><span class="lineno">  419</span> </div>
<div class="line"><a id="l00420" name="l00420"></a><span class="lineno">  420</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_sock_create(BIO *a) {</div>
<div class="line"><a id="l00421" name="l00421"></a><span class="lineno">  421</span>  BIO_set_init(a, 1);</div>
<div class="line"><a id="l00422" name="l00422"></a><span class="lineno">  422</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00423" name="l00423"></a><span class="lineno">  423</span>}</div>
<div class="line"><a id="l00424" name="l00424"></a><span class="lineno">  424</span> </div>
<div class="line"><a id="l00425" name="l00425"></a><span class="lineno">  425</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_sock_destroy(BIO *a) {</div>
<div class="line"><a id="l00426" name="l00426"></a><span class="lineno">  426</span>  (void)a;</div>
<div class="line"><a id="l00427" name="l00427"></a><span class="lineno">  427</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00428" name="l00428"></a><span class="lineno">  428</span>}</div>
<div class="line"><a id="l00429" name="l00429"></a><span class="lineno">  429</span> </div>
<div class="line"><a id="l00430" name="l00430"></a><span class="lineno">  430</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_sock_read(BIO *a, <span class="keywordtype">char</span> *out, <span class="keywordtype">int</span> outl) {</div>
<div class="line"><a id="l00431" name="l00431"></a><span class="lineno">  431</span>  <span class="keywordtype">int</span> ret = 0;</div>
<div class="line"><a id="l00432" name="l00432"></a><span class="lineno">  432</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *)BIO_get_data(a);</div>
<div class="line"><a id="l00433" name="l00433"></a><span class="lineno">  433</span> </div>
<div class="line"><a id="l00434" name="l00434"></a><span class="lineno">  434</span>  <span class="keywordflow">if</span> (out != NULL) {</div>
<div class="line"><a id="l00435" name="l00435"></a><span class="lineno">  435</span>    ret = (int)<a class="code hl_function" href="coap__io_8c.html#a2bbd598665f98a1e2f899b475f01618b">coap_socket_read</a>(&amp;session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)out, (size_t)outl);</div>
<div class="line"><a id="l00436" name="l00436"></a><span class="lineno">  436</span>    <span class="keywordflow">if</span> (ret == 0) {</div>
<div class="line"><a id="l00437" name="l00437"></a><span class="lineno">  437</span>      BIO_set_retry_read(a);</div>
<div class="line"><a id="l00438" name="l00438"></a><span class="lineno">  438</span>      ret = -1;</div>
<div class="line"><a id="l00439" name="l00439"></a><span class="lineno">  439</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00440" name="l00440"></a><span class="lineno">  440</span>      BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00441" name="l00441"></a><span class="lineno">  441</span>    }</div>
<div class="line"><a id="l00442" name="l00442"></a><span class="lineno">  442</span>  }</div>
<div class="line"><a id="l00443" name="l00443"></a><span class="lineno">  443</span>  <span class="keywordflow">return</span> ret;</div>
<div class="line"><a id="l00444" name="l00444"></a><span class="lineno">  444</span>}</div>
<div class="line"><a id="l00445" name="l00445"></a><span class="lineno">  445</span> </div>
<div class="line"><a id="l00446" name="l00446"></a><span class="lineno">  446</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_sock_write(BIO *a, <span class="keyword">const</span> <span class="keywordtype">char</span> *in, <span class="keywordtype">int</span> inl) {</div>
<div class="line"><a id="l00447" name="l00447"></a><span class="lineno">  447</span>  <span class="keywordtype">int</span> ret = 0;</div>
<div class="line"><a id="l00448" name="l00448"></a><span class="lineno">  448</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *)BIO_get_data(a);</div>
<div class="line"><a id="l00449" name="l00449"></a><span class="lineno">  449</span> </div>
<div class="line"><a id="l00450" name="l00450"></a><span class="lineno">  450</span>  ret = (int)<a class="code hl_function" href="coap__io_8c.html#a53d8fd138fc5bf331c2bf71d72ac4848">coap_socket_write</a>(&amp;session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>, (<span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)in, (size_t)inl);</div>
<div class="line"><a id="l00451" name="l00451"></a><span class="lineno">  451</span>  BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00452" name="l00452"></a><span class="lineno">  452</span>  <span class="keywordflow">if</span> (ret == 0) {</div>
<div class="line"><a id="l00453" name="l00453"></a><span class="lineno">  453</span>    BIO_set_retry_read(a);</div>
<div class="line"><a id="l00454" name="l00454"></a><span class="lineno">  454</span>    ret = -1;</div>
<div class="line"><a id="l00455" name="l00455"></a><span class="lineno">  455</span>  } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00456" name="l00456"></a><span class="lineno">  456</span>    BIO_clear_retry_flags(a);</div>
<div class="line"><a id="l00457" name="l00457"></a><span class="lineno">  457</span>  }</div>
<div class="line"><a id="l00458" name="l00458"></a><span class="lineno">  458</span>  <span class="keywordflow">return</span> ret;</div>
<div class="line"><a id="l00459" name="l00459"></a><span class="lineno">  459</span>}</div>
<div class="line"><a id="l00460" name="l00460"></a><span class="lineno">  460</span> </div>
<div class="line"><a id="l00461" name="l00461"></a><span class="lineno">  461</span><span class="keyword">static</span> <span class="keywordtype">int</span> coap_sock_puts(BIO *a, <span class="keyword">const</span> <span class="keywordtype">char</span> *pstr) {</div>
<div class="line"><a id="l00462" name="l00462"></a><span class="lineno">  462</span>  <span class="keywordflow">return</span> coap_sock_write(a, pstr, (<span class="keywordtype">int</span>)strlen(pstr));</div>
<div class="line"><a id="l00463" name="l00463"></a><span class="lineno">  463</span>}</div>
<div class="line"><a id="l00464" name="l00464"></a><span class="lineno">  464</span> </div>
<div class="line"><a id="l00465" name="l00465"></a><span class="lineno">  465</span><span class="keyword">static</span> <span class="keywordtype">long</span> coap_sock_ctrl(BIO *a, <span class="keywordtype">int</span> cmd, <span class="keywordtype">long</span> num, <span class="keywordtype">void</span> *ptr) {</div>
<div class="line"><a id="l00466" name="l00466"></a><span class="lineno">  466</span>  <span class="keywordtype">int</span> r = 1;</div>
<div class="line"><a id="l00467" name="l00467"></a><span class="lineno">  467</span>  (void)a;</div>
<div class="line"><a id="l00468" name="l00468"></a><span class="lineno">  468</span>  (void)ptr;</div>
<div class="line"><a id="l00469" name="l00469"></a><span class="lineno">  469</span>  (void)num;</div>
<div class="line"><a id="l00470" name="l00470"></a><span class="lineno">  470</span> </div>
<div class="line"><a id="l00471" name="l00471"></a><span class="lineno">  471</span>  <span class="keywordflow">switch</span> (cmd) {</div>
<div class="line"><a id="l00472" name="l00472"></a><span class="lineno">  472</span>  <span class="keywordflow">case</span> BIO_C_SET_FD:</div>
<div class="line"><a id="l00473" name="l00473"></a><span class="lineno">  473</span>  <span class="keywordflow">case</span> BIO_C_GET_FD:</div>
<div class="line"><a id="l00474" name="l00474"></a><span class="lineno">  474</span>    r = -1;</div>
<div class="line"><a id="l00475" name="l00475"></a><span class="lineno">  475</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00476" name="l00476"></a><span class="lineno">  476</span>  <span class="keywordflow">case</span> BIO_CTRL_SET_CLOSE:</div>
<div class="line"><a id="l00477" name="l00477"></a><span class="lineno">  477</span>  <span class="keywordflow">case</span> BIO_CTRL_DUP:</div>
<div class="line"><a id="l00478" name="l00478"></a><span class="lineno">  478</span>  <span class="keywordflow">case</span> BIO_CTRL_FLUSH:</div>
<div class="line"><a id="l00479" name="l00479"></a><span class="lineno">  479</span>    r = 1;</div>
<div class="line"><a id="l00480" name="l00480"></a><span class="lineno">  480</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00481" name="l00481"></a><span class="lineno">  481</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l00482" name="l00482"></a><span class="lineno">  482</span>  <span class="keywordflow">case</span> BIO_CTRL_GET_CLOSE:</div>
<div class="line"><a id="l00483" name="l00483"></a><span class="lineno">  483</span>    r = 0;</div>
<div class="line"><a id="l00484" name="l00484"></a><span class="lineno">  484</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00485" name="l00485"></a><span class="lineno">  485</span>  }</div>
<div class="line"><a id="l00486" name="l00486"></a><span class="lineno">  486</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l00487" name="l00487"></a><span class="lineno">  487</span>}</div>
<div class="line"><a id="l00488" name="l00488"></a><span class="lineno">  488</span> </div>
<div class="line"><a id="l00489" name="l00489"></a><span class="lineno">  489</span><span class="keywordtype">void</span> *<a class="code hl_function" href="coap__notls_8c.html#a0671863eb92f2a37b1627b67564e82d4">coap_dtls_new_context</a>(<span class="keyword">struct</span> <a class="code hl_struct" href="structcoap__context__t.html">coap_context_t</a> *coap_context) {</div>
<div class="line"><a id="l00490" name="l00490"></a><span class="lineno">  490</span>  coap_openssl_context_t *context;</div>
<div class="line"><a id="l00491" name="l00491"></a><span class="lineno">  491</span>  (void)coap_context;</div>
<div class="line"><a id="l00492" name="l00492"></a><span class="lineno">  492</span> </div>
<div class="line"><a id="l00493" name="l00493"></a><span class="lineno">  493</span>  context = (coap_openssl_context_t *)<a class="code hl_function" href="mem_8h.html#a26f40acd710e6c964242c2e0cd789375">coap_malloc</a>(<span class="keyword">sizeof</span>(coap_openssl_context_t));</div>
<div class="line"><a id="l00494" name="l00494"></a><span class="lineno">  494</span>  <span class="keywordflow">if</span> (context) {</div>
<div class="line"><a id="l00495" name="l00495"></a><span class="lineno">  495</span>    <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> cookie_secret[32];</div>
<div class="line"><a id="l00496" name="l00496"></a><span class="lineno">  496</span> </div>
<div class="line"><a id="l00497" name="l00497"></a><span class="lineno">  497</span>    memset(context, 0, <span class="keyword">sizeof</span>(coap_openssl_context_t));</div>
<div class="line"><a id="l00498" name="l00498"></a><span class="lineno">  498</span> </div>
<div class="line"><a id="l00499" name="l00499"></a><span class="lineno">  499</span>    <span class="comment">/* Set up DTLS context */</span></div>
<div class="line"><a id="l00500" name="l00500"></a><span class="lineno">  500</span>    context-&gt;dtls.ctx = SSL_CTX_new(DTLS_method());</div>
<div class="line"><a id="l00501" name="l00501"></a><span class="lineno">  501</span>    <span class="keywordflow">if</span> (!context-&gt;dtls.ctx)</div>
<div class="line"><a id="l00502" name="l00502"></a><span class="lineno">  502</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00503" name="l00503"></a><span class="lineno">  503</span>    SSL_CTX_set_min_proto_version(context-&gt;dtls.ctx, DTLS1_2_VERSION);</div>
<div class="line"><a id="l00504" name="l00504"></a><span class="lineno">  504</span>    SSL_CTX_set_app_data(context-&gt;dtls.ctx, &amp;context-&gt;dtls);</div>
<div class="line"><a id="l00505" name="l00505"></a><span class="lineno">  505</span>    SSL_CTX_set_read_ahead(context-&gt;dtls.ctx, 1);</div>
<div class="line"><a id="l00506" name="l00506"></a><span class="lineno">  506</span>    SSL_CTX_set_cipher_list(context-&gt;dtls.ctx, <span class="stringliteral">&quot;TLSv1.2:TLSv1.0&quot;</span>);</div>
<div class="line"><a id="l00507" name="l00507"></a><span class="lineno">  507</span>    <span class="keywordflow">if</span> (!RAND_bytes(cookie_secret, (<span class="keywordtype">int</span>)<span class="keyword">sizeof</span>(cookie_secret))) {</div>
<div class="line"><a id="l00508" name="l00508"></a><span class="lineno">  508</span>      <span class="keywordflow">if</span> (<a class="code hl_variable" href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a> &gt;= <a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>)</div>
<div class="line"><a id="l00509" name="l00509"></a><span class="lineno">  509</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00510" name="l00510"></a><span class="lineno">  510</span>                 <span class="stringliteral">&quot;Insufficient entropy for random cookie generation&quot;</span>);</div>
<div class="line"><a id="l00511" name="l00511"></a><span class="lineno">  511</span>      <a class="code hl_define" href="group__prng.html#ga7c7d6401e43c811dacb517d51184c873">prng</a>(cookie_secret, <span class="keyword">sizeof</span>(cookie_secret));</div>
<div class="line"><a id="l00512" name="l00512"></a><span class="lineno">  512</span>    }</div>
<div class="line"><a id="l00513" name="l00513"></a><span class="lineno">  513</span>    context-&gt;dtls.cookie_hmac = HMAC_CTX_new();</div>
<div class="line"><a id="l00514" name="l00514"></a><span class="lineno">  514</span>    <span class="keywordflow">if</span> (!HMAC_Init_ex(context-&gt;dtls.cookie_hmac, cookie_secret, (<span class="keywordtype">int</span>)<span class="keyword">sizeof</span>(cookie_secret), EVP_sha256(), NULL))</div>
<div class="line"><a id="l00515" name="l00515"></a><span class="lineno">  515</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00516" name="l00516"></a><span class="lineno">  516</span>    SSL_CTX_set_cookie_generate_cb(context-&gt;dtls.ctx, coap_dtls_generate_cookie);</div>
<div class="line"><a id="l00517" name="l00517"></a><span class="lineno">  517</span>    SSL_CTX_set_cookie_verify_cb(context-&gt;dtls.ctx, coap_dtls_verify_cookie);</div>
<div class="line"><a id="l00518" name="l00518"></a><span class="lineno">  518</span>    SSL_CTX_set_info_callback(context-&gt;dtls.ctx, coap_dtls_info_callback);</div>
<div class="line"><a id="l00519" name="l00519"></a><span class="lineno">  519</span>    SSL_CTX_set_options(context-&gt;dtls.ctx, SSL_OP_NO_QUERY_MTU);</div>
<div class="line"><a id="l00520" name="l00520"></a><span class="lineno">  520</span>    context-&gt;dtls.meth = BIO_meth_new(BIO_TYPE_DGRAM, <span class="stringliteral">&quot;coapdgram&quot;</span>);</div>
<div class="line"><a id="l00521" name="l00521"></a><span class="lineno">  521</span>    <span class="keywordflow">if</span> (!context-&gt;dtls.meth)</div>
<div class="line"><a id="l00522" name="l00522"></a><span class="lineno">  522</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00523" name="l00523"></a><span class="lineno">  523</span>    context-&gt;dtls.bio_addr = BIO_ADDR_new();</div>
<div class="line"><a id="l00524" name="l00524"></a><span class="lineno">  524</span>    <span class="keywordflow">if</span> (!context-&gt;dtls.bio_addr)</div>
<div class="line"><a id="l00525" name="l00525"></a><span class="lineno">  525</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00526" name="l00526"></a><span class="lineno">  526</span>    BIO_meth_set_write(context-&gt;dtls.meth, coap_dgram_write);</div>
<div class="line"><a id="l00527" name="l00527"></a><span class="lineno">  527</span>    BIO_meth_set_read(context-&gt;dtls.meth, coap_dgram_read);</div>
<div class="line"><a id="l00528" name="l00528"></a><span class="lineno">  528</span>    BIO_meth_set_puts(context-&gt;dtls.meth, coap_dgram_puts);</div>
<div class="line"><a id="l00529" name="l00529"></a><span class="lineno">  529</span>    BIO_meth_set_ctrl(context-&gt;dtls.meth, coap_dgram_ctrl);</div>
<div class="line"><a id="l00530" name="l00530"></a><span class="lineno">  530</span>    BIO_meth_set_create(context-&gt;dtls.meth, coap_dgram_create);</div>
<div class="line"><a id="l00531" name="l00531"></a><span class="lineno">  531</span>    BIO_meth_set_destroy(context-&gt;dtls.meth, coap_dgram_destroy);</div>
<div class="line"><a id="l00532" name="l00532"></a><span class="lineno">  532</span> </div>
<div class="line"><a id="l00533" name="l00533"></a><span class="lineno">  533</span>    <span class="comment">/* Set up TLS context */</span></div>
<div class="line"><a id="l00534" name="l00534"></a><span class="lineno">  534</span>    context-&gt;tls.ctx = SSL_CTX_new(TLS_method());</div>
<div class="line"><a id="l00535" name="l00535"></a><span class="lineno">  535</span>    <span class="keywordflow">if</span> (!context-&gt;tls.ctx)</div>
<div class="line"><a id="l00536" name="l00536"></a><span class="lineno">  536</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00537" name="l00537"></a><span class="lineno">  537</span>    SSL_CTX_set_app_data(context-&gt;tls.ctx, &amp;context-&gt;tls);</div>
<div class="line"><a id="l00538" name="l00538"></a><span class="lineno">  538</span>    SSL_CTX_set_min_proto_version(context-&gt;tls.ctx, TLS1_VERSION);</div>
<div class="line"><a id="l00539" name="l00539"></a><span class="lineno">  539</span>    SSL_CTX_set_cipher_list(context-&gt;tls.ctx, <span class="stringliteral">&quot;TLSv1.2:TLSv1.0&quot;</span>);</div>
<div class="line"><a id="l00540" name="l00540"></a><span class="lineno">  540</span>    SSL_CTX_set_info_callback(context-&gt;tls.ctx, coap_dtls_info_callback);</div>
<div class="line"><a id="l00541" name="l00541"></a><span class="lineno">  541</span>    context-&gt;tls.meth = BIO_meth_new(BIO_TYPE_SOCKET, <span class="stringliteral">&quot;coapsock&quot;</span>);</div>
<div class="line"><a id="l00542" name="l00542"></a><span class="lineno">  542</span>    <span class="keywordflow">if</span> (!context-&gt;tls.meth)</div>
<div class="line"><a id="l00543" name="l00543"></a><span class="lineno">  543</span>      <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l00544" name="l00544"></a><span class="lineno">  544</span>    BIO_meth_set_write(context-&gt;tls.meth, coap_sock_write);</div>
<div class="line"><a id="l00545" name="l00545"></a><span class="lineno">  545</span>    BIO_meth_set_read(context-&gt;tls.meth, coap_sock_read);</div>
<div class="line"><a id="l00546" name="l00546"></a><span class="lineno">  546</span>    BIO_meth_set_puts(context-&gt;tls.meth, coap_sock_puts);</div>
<div class="line"><a id="l00547" name="l00547"></a><span class="lineno">  547</span>    BIO_meth_set_ctrl(context-&gt;tls.meth, coap_sock_ctrl);</div>
<div class="line"><a id="l00548" name="l00548"></a><span class="lineno">  548</span>    BIO_meth_set_create(context-&gt;tls.meth, coap_sock_create);</div>
<div class="line"><a id="l00549" name="l00549"></a><span class="lineno">  549</span>    BIO_meth_set_destroy(context-&gt;tls.meth, coap_sock_destroy);</div>
<div class="line"><a id="l00550" name="l00550"></a><span class="lineno">  550</span>  }</div>
<div class="line"><a id="l00551" name="l00551"></a><span class="lineno">  551</span> </div>
<div class="line"><a id="l00552" name="l00552"></a><span class="lineno">  552</span>  <span class="keywordflow">return</span> context;</div>
<div class="line"><a id="l00553" name="l00553"></a><span class="lineno">  553</span> </div>
<div class="line"><a id="l00554" name="l00554"></a><span class="lineno">  554</span>error:</div>
<div class="line"><a id="l00555" name="l00555"></a><span class="lineno">  555</span>  <a class="code hl_function" href="coap__notls_8c.html#ab6dd0798202ab0ff55fc7024e80a72d1">coap_dtls_free_context</a>(context);</div>
<div class="line"><a id="l00556" name="l00556"></a><span class="lineno">  556</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l00557" name="l00557"></a><span class="lineno">  557</span>}</div>
<div class="line"><a id="l00558" name="l00558"></a><span class="lineno">  558</span> </div>
<div class="line"><a id="l00559" name="l00559"></a><span class="lineno">  559</span><span class="keywordtype">int</span></div>
<div class="line"><a id="l00560" name="l00560"></a><span class="lineno">  560</span><a class="code hl_function" href="coap__notls_8c.html#a36896a2f4100c177e129ec8a5697aa95">coap_dtls_context_set_psk</a>(<a class="code hl_struct" href="structcoap__context__t.html">coap_context_t</a> *ctx,</div>
<div class="line"><a id="l00561" name="l00561"></a><span class="lineno">  561</span>                          <span class="keyword">const</span> <span class="keywordtype">char</span> *identity_hint,</div>
<div class="line"><a id="l00562" name="l00562"></a><span class="lineno">  562</span>                          <a class="code hl_enumeration" href="group__dtls__internal.html#ga4dbea8aa6943bcf865990b5cebb6bfa4">coap_dtls_role_t</a> role</div>
<div class="line"><a id="l00563" name="l00563"></a><span class="lineno">  563</span>) {</div>
<div class="line"><a id="l00564" name="l00564"></a><span class="lineno">  564</span>  coap_openssl_context_t *context = ((coap_openssl_context_t *)ctx-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l00565" name="l00565"></a><span class="lineno">  565</span>  BIO *bio;</div>
<div class="line"><a id="l00566" name="l00566"></a><span class="lineno">  566</span> </div>
<div class="line"><a id="l00567" name="l00567"></a><span class="lineno">  567</span>  <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a>) {</div>
<div class="line"><a id="l00568" name="l00568"></a><span class="lineno">  568</span>    SSL_CTX_set_psk_server_callback(context-&gt;dtls.ctx, coap_dtls_psk_server_callback);</div>
<div class="line"><a id="l00569" name="l00569"></a><span class="lineno">  569</span>    SSL_CTX_set_psk_server_callback(context-&gt;tls.ctx, coap_dtls_psk_server_callback);</div>
<div class="line"><a id="l00570" name="l00570"></a><span class="lineno">  570</span>    SSL_CTX_use_psk_identity_hint(context-&gt;dtls.ctx, identity_hint ? identity_hint : <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a id="l00571" name="l00571"></a><span class="lineno">  571</span>    SSL_CTX_use_psk_identity_hint(context-&gt;tls.ctx, identity_hint ? identity_hint : <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a id="l00572" name="l00572"></a><span class="lineno">  572</span>  }</div>
<div class="line"><a id="l00573" name="l00573"></a><span class="lineno">  573</span>  <span class="keywordflow">if</span> (!context-&gt;dtls.ssl) {</div>
<div class="line"><a id="l00574" name="l00574"></a><span class="lineno">  574</span>    <span class="comment">/* This is set up to handle new incoming sessions to a server */</span></div>
<div class="line"><a id="l00575" name="l00575"></a><span class="lineno">  575</span>    context-&gt;dtls.ssl = SSL_new(context-&gt;dtls.ctx);</div>
<div class="line"><a id="l00576" name="l00576"></a><span class="lineno">  576</span>    <span class="keywordflow">if</span> (!context-&gt;dtls.ssl)</div>
<div class="line"><a id="l00577" name="l00577"></a><span class="lineno">  577</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00578" name="l00578"></a><span class="lineno">  578</span>    bio = BIO_new(context-&gt;dtls.meth);</div>
<div class="line"><a id="l00579" name="l00579"></a><span class="lineno">  579</span>    <span class="keywordflow">if</span> (!bio) {</div>
<div class="line"><a id="l00580" name="l00580"></a><span class="lineno">  580</span>      SSL_free (context-&gt;dtls.ssl);</div>
<div class="line"><a id="l00581" name="l00581"></a><span class="lineno">  581</span>      context-&gt;dtls.ssl = NULL;</div>
<div class="line"><a id="l00582" name="l00582"></a><span class="lineno">  582</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00583" name="l00583"></a><span class="lineno">  583</span>    }</div>
<div class="line"><a id="l00584" name="l00584"></a><span class="lineno">  584</span>    SSL_set_bio(context-&gt;dtls.ssl, bio, bio);</div>
<div class="line"><a id="l00585" name="l00585"></a><span class="lineno">  585</span>    SSL_set_app_data(context-&gt;dtls.ssl, NULL);</div>
<div class="line"><a id="l00586" name="l00586"></a><span class="lineno">  586</span>    SSL_set_options(context-&gt;dtls.ssl, SSL_OP_COOKIE_EXCHANGE);</div>
<div class="line"><a id="l00587" name="l00587"></a><span class="lineno">  587</span>    SSL_set_mtu(context-&gt;dtls.ssl, <a class="code hl_define" href="pdu_8h.html#acd9e29989066f01c6951113d951cd158">COAP_DEFAULT_MTU</a>);</div>
<div class="line"><a id="l00588" name="l00588"></a><span class="lineno">  588</span>  }</div>
<div class="line"><a id="l00589" name="l00589"></a><span class="lineno">  589</span>  context-&gt;psk_pki_enabled |= IS_PSK;</div>
<div class="line"><a id="l00590" name="l00590"></a><span class="lineno">  590</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00591" name="l00591"></a><span class="lineno">  591</span>}</div>
<div class="line"><a id="l00592" name="l00592"></a><span class="lineno">  592</span> </div>
<div class="line"><a id="l00593" name="l00593"></a><span class="lineno">  593</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l00594" name="l00594"></a><span class="lineno">  594</span>map_key_type(<span class="keywordtype">int</span> asn1_private_key_type</div>
<div class="line"><a id="l00595" name="l00595"></a><span class="lineno">  595</span>) {</div>
<div class="line"><a id="l00596" name="l00596"></a><span class="lineno">  596</span>  <span class="keywordflow">switch</span> (asn1_private_key_type) {</div>
<div class="line"><a id="l00597" name="l00597"></a><span class="lineno">  597</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a0d8b252581daca277bbc4aa490a6cc01">COAP_ASN1_PKEY_NONE</a>: <span class="keywordflow">return</span> EVP_PKEY_NONE;</div>
<div class="line"><a id="l00598" name="l00598"></a><span class="lineno">  598</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a815f6139ef4796dc825afc72871b1425">COAP_ASN1_PKEY_RSA</a>: <span class="keywordflow">return</span> EVP_PKEY_RSA;</div>
<div class="line"><a id="l00599" name="l00599"></a><span class="lineno">  599</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a190dcef2ec78de18ce08555d285c40b7">COAP_ASN1_PKEY_RSA2</a>: <span class="keywordflow">return</span> EVP_PKEY_RSA2;</div>
<div class="line"><a id="l00600" name="l00600"></a><span class="lineno">  600</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a195328aaae1102658ebf3a9bd6d8c027">COAP_ASN1_PKEY_DSA</a>: <span class="keywordflow">return</span> EVP_PKEY_DSA;</div>
<div class="line"><a id="l00601" name="l00601"></a><span class="lineno">  601</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a888108396b26f167f26e8a293e7c44e7">COAP_ASN1_PKEY_DSA1</a>: <span class="keywordflow">return</span> EVP_PKEY_DSA1;</div>
<div class="line"><a id="l00602" name="l00602"></a><span class="lineno">  602</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a5d86ada626fc1b778eabec59952bec4d">COAP_ASN1_PKEY_DSA2</a>: <span class="keywordflow">return</span> EVP_PKEY_DSA2;</div>
<div class="line"><a id="l00603" name="l00603"></a><span class="lineno">  603</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ac6a7ddf9cabc5273bb9a69de5e6971be">COAP_ASN1_PKEY_DSA3</a>: <span class="keywordflow">return</span> EVP_PKEY_DSA3;</div>
<div class="line"><a id="l00604" name="l00604"></a><span class="lineno">  604</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a4d2b14a573ffb6194d1ba2789e831de2">COAP_ASN1_PKEY_DSA4</a>: <span class="keywordflow">return</span> EVP_PKEY_DSA4;</div>
<div class="line"><a id="l00605" name="l00605"></a><span class="lineno">  605</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a05caf595fe597cf31b86e61e4dc21fe5">COAP_ASN1_PKEY_DH</a>: <span class="keywordflow">return</span> EVP_PKEY_DH;</div>
<div class="line"><a id="l00606" name="l00606"></a><span class="lineno">  606</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a32fec5facd159d2c9ca9d00cd9fb904a">COAP_ASN1_PKEY_DHX</a>: <span class="keywordflow">return</span> EVP_PKEY_DHX;</div>
<div class="line"><a id="l00607" name="l00607"></a><span class="lineno">  607</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069abeca018329efa3c03150aac3ba058c33">COAP_ASN1_PKEY_EC</a>: <span class="keywordflow">return</span> EVP_PKEY_EC;</div>
<div class="line"><a id="l00608" name="l00608"></a><span class="lineno">  608</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ae0e54b44eb5c901d76ddca601e46bda0">COAP_ASN1_PKEY_HMAC</a>: <span class="keywordflow">return</span> EVP_PKEY_HMAC;</div>
<div class="line"><a id="l00609" name="l00609"></a><span class="lineno">  609</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ae170f1e0d7ec889322b1589b2a9f9923">COAP_ASN1_PKEY_CMAC</a>: <span class="keywordflow">return</span> EVP_PKEY_CMAC;</div>
<div class="line"><a id="l00610" name="l00610"></a><span class="lineno">  610</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a17174dc07690f17fc0fd223c76bb25dc">COAP_ASN1_PKEY_TLS1_PRF</a>: <span class="keywordflow">return</span> EVP_PKEY_TLS1_PRF;</div>
<div class="line"><a id="l00611" name="l00611"></a><span class="lineno">  611</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a8f0d588891e977c023bcf6de079dc893">COAP_ASN1_PKEY_HKDF</a>: <span class="keywordflow">return</span> EVP_PKEY_HKDF;</div>
<div class="line"><a id="l00612" name="l00612"></a><span class="lineno">  612</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l00613" name="l00613"></a><span class="lineno">  613</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00614" name="l00614"></a><span class="lineno">  614</span>             <span class="stringliteral">&quot;*** setup_pki: DTLS: Unknown Private Key type %d for ASN1\n&quot;</span>,</div>
<div class="line"><a id="l00615" name="l00615"></a><span class="lineno">  615</span>             asn1_private_key_type);</div>
<div class="line"><a id="l00616" name="l00616"></a><span class="lineno">  616</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00617" name="l00617"></a><span class="lineno">  617</span>  }</div>
<div class="line"><a id="l00618" name="l00618"></a><span class="lineno">  618</span>  <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00619" name="l00619"></a><span class="lineno">  619</span>}</div>
<div class="line"><a id="l00620" name="l00620"></a><span class="lineno">  620</span><span class="keyword">static</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> coap_alpn[] = { 4, <span class="charliteral">&#39;c&#39;</span>, <span class="charliteral">&#39;o&#39;</span>, <span class="charliteral">&#39;a&#39;</span>, <span class="charliteral">&#39;p&#39;</span> };</div>
<div class="line"><a id="l00621" name="l00621"></a><span class="lineno">  621</span> </div>
<div class="line"><a id="l00622" name="l00622"></a><span class="lineno">  622</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l00623" name="l00623"></a><span class="lineno">  623</span>server_alpn_callback (SSL *ssl <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a>,</div>
<div class="line"><a id="l00624" name="l00624"></a><span class="lineno">  624</span>                      <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> **out,</div>
<div class="line"><a id="l00625" name="l00625"></a><span class="lineno">  625</span>                      <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *outlen,</div>
<div class="line"><a id="l00626" name="l00626"></a><span class="lineno">  626</span>                      <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *in,</div>
<div class="line"><a id="l00627" name="l00627"></a><span class="lineno">  627</span>                      <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> inlen,</div>
<div class="line"><a id="l00628" name="l00628"></a><span class="lineno">  628</span>                      <span class="keywordtype">void</span> *arg <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a></div>
<div class="line"><a id="l00629" name="l00629"></a><span class="lineno">  629</span>) {</div>
<div class="line"><a id="l00630" name="l00630"></a><span class="lineno">  630</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *tout = NULL;</div>
<div class="line"><a id="l00631" name="l00631"></a><span class="lineno">  631</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a id="l00632" name="l00632"></a><span class="lineno">  632</span>  <span class="keywordflow">if</span> (inlen == 0)</div>
<div class="line"><a id="l00633" name="l00633"></a><span class="lineno">  633</span>    <span class="keywordflow">return</span> SSL_TLSEXT_ERR_NOACK;</div>
<div class="line"><a id="l00634" name="l00634"></a><span class="lineno">  634</span>  ret = SSL_select_next_proto(&amp;tout,</div>
<div class="line"><a id="l00635" name="l00635"></a><span class="lineno">  635</span>                              outlen,</div>
<div class="line"><a id="l00636" name="l00636"></a><span class="lineno">  636</span>                              coap_alpn,</div>
<div class="line"><a id="l00637" name="l00637"></a><span class="lineno">  637</span>                              <span class="keyword">sizeof</span>(coap_alpn),</div>
<div class="line"><a id="l00638" name="l00638"></a><span class="lineno">  638</span>                              in,</div>
<div class="line"><a id="l00639" name="l00639"></a><span class="lineno">  639</span>                              inlen);</div>
<div class="line"><a id="l00640" name="l00640"></a><span class="lineno">  640</span>  *out = tout;</div>
<div class="line"><a id="l00641" name="l00641"></a><span class="lineno">  641</span>  <span class="keywordflow">return</span> (ret != OPENSSL_NPN_NEGOTIATED) ? SSL_TLSEXT_ERR_NOACK : SSL_TLSEXT_ERR_OK;</div>
<div class="line"><a id="l00642" name="l00642"></a><span class="lineno">  642</span>}</div>
<div class="line"><a id="l00643" name="l00643"></a><span class="lineno">  643</span> </div>
<div class="line"><a id="l00644" name="l00644"></a><span class="lineno">  644</span><span class="keyword">static</span> <span class="keywordtype">void</span></div>
<div class="line"><a id="l00645" name="l00645"></a><span class="lineno">  645</span>add_ca_to_cert_store(X509_STORE *st, X509 *x509)</div>
<div class="line"><a id="l00646" name="l00646"></a><span class="lineno">  646</span>{</div>
<div class="line"><a id="l00647" name="l00647"></a><span class="lineno">  647</span>  <span class="keywordtype">long</span> e;</div>
<div class="line"><a id="l00648" name="l00648"></a><span class="lineno">  648</span> </div>
<div class="line"><a id="l00649" name="l00649"></a><span class="lineno">  649</span>  <span class="comment">/* Flush out existing errors */</span></div>
<div class="line"><a id="l00650" name="l00650"></a><span class="lineno">  650</span>  <span class="keywordflow">while</span> ((e = ERR_get_error()) != 0) {</div>
<div class="line"><a id="l00651" name="l00651"></a><span class="lineno">  651</span>  }</div>
<div class="line"><a id="l00652" name="l00652"></a><span class="lineno">  652</span> </div>
<div class="line"><a id="l00653" name="l00653"></a><span class="lineno">  653</span>  <span class="keywordflow">if</span> (!X509_STORE_add_cert(st, x509)) {</div>
<div class="line"><a id="l00654" name="l00654"></a><span class="lineno">  654</span>    <span class="keywordflow">while</span> ((e = ERR_get_error()) != 0) {</div>
<div class="line"><a id="l00655" name="l00655"></a><span class="lineno">  655</span>      <span class="keywordtype">int</span> r = ERR_GET_REASON(e);</div>
<div class="line"><a id="l00656" name="l00656"></a><span class="lineno">  656</span>      <span class="keywordflow">if</span> (r != X509_R_CERT_ALREADY_IN_HASH_TABLE) {</div>
<div class="line"><a id="l00657" name="l00657"></a><span class="lineno">  657</span>        <span class="comment">/* Not already added */</span></div>
<div class="line"><a id="l00658" name="l00658"></a><span class="lineno">  658</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;***setup_pki: (D)TLS: %s at %s:%s\n&quot;</span>,</div>
<div class="line"><a id="l00659" name="l00659"></a><span class="lineno">  659</span>                 ERR_reason_error_string(e),</div>
<div class="line"><a id="l00660" name="l00660"></a><span class="lineno">  660</span>                 ERR_lib_error_string(e),</div>
<div class="line"><a id="l00661" name="l00661"></a><span class="lineno">  661</span>                 ERR_func_error_string(e));</div>
<div class="line"><a id="l00662" name="l00662"></a><span class="lineno">  662</span>      }</div>
<div class="line"><a id="l00663" name="l00663"></a><span class="lineno">  663</span>    }</div>
<div class="line"><a id="l00664" name="l00664"></a><span class="lineno">  664</span>  }</div>
<div class="line"><a id="l00665" name="l00665"></a><span class="lineno">  665</span>}</div>
<div class="line"><a id="l00666" name="l00666"></a><span class="lineno">  666</span> </div>
<div class="line"><a id="l00667" name="l00667"></a><span class="lineno">  667</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l00668" name="l00668"></a><span class="lineno">  668</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l00669" name="l00669"></a><span class="lineno">  669</span>setup_pki_server(SSL_CTX *ctx,</div>
<div class="line"><a id="l00670" name="l00670"></a><span class="lineno">  670</span>                 <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a>* setup_data</div>
<div class="line"><a id="l00671" name="l00671"></a><span class="lineno">  671</span>) {</div>
<div class="line"><a id="l00672" name="l00672"></a><span class="lineno">  672</span>  <span class="keywordflow">switch</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a>) {</div>
<div class="line"><a id="l00673" name="l00673"></a><span class="lineno">  673</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980a5685869e9efbf03fe4d05120ff810aef">COAP_PKI_KEY_PEM</a>:</div>
<div class="line"><a id="l00674" name="l00674"></a><span class="lineno">  674</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00675" name="l00675"></a><span class="lineno">  675</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>[0]) {</div>
<div class="line"><a id="l00676" name="l00676"></a><span class="lineno">  676</span>      <span class="keywordflow">if</span> (!(SSL_CTX_use_certificate_file(ctx,</div>
<div class="line"><a id="l00677" name="l00677"></a><span class="lineno">  677</span>                                        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>,</div>
<div class="line"><a id="l00678" name="l00678"></a><span class="lineno">  678</span>                                        SSL_FILETYPE_PEM))) {</div>
<div class="line"><a id="l00679" name="l00679"></a><span class="lineno">  679</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00680" name="l00680"></a><span class="lineno">  680</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00681" name="l00681"></a><span class="lineno">  681</span>                 <span class="stringliteral">&quot;Server Certificate\n&quot;</span>,</div>
<div class="line"><a id="l00682" name="l00682"></a><span class="lineno">  682</span>                 setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>);</div>
<div class="line"><a id="l00683" name="l00683"></a><span class="lineno">  683</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00684" name="l00684"></a><span class="lineno">  684</span>      }</div>
<div class="line"><a id="l00685" name="l00685"></a><span class="lineno">  685</span>    }</div>
<div class="line"><a id="l00686" name="l00686"></a><span class="lineno">  686</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00687" name="l00687"></a><span class="lineno">  687</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00688" name="l00688"></a><span class="lineno">  688</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No Server Certificate defined\n&quot;</span>);</div>
<div class="line"><a id="l00689" name="l00689"></a><span class="lineno">  689</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00690" name="l00690"></a><span class="lineno">  690</span>    }</div>
<div class="line"><a id="l00691" name="l00691"></a><span class="lineno">  691</span> </div>
<div class="line"><a id="l00692" name="l00692"></a><span class="lineno">  692</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00693" name="l00693"></a><span class="lineno">  693</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>[0]) {</div>
<div class="line"><a id="l00694" name="l00694"></a><span class="lineno">  694</span>      <span class="keywordflow">if</span> (!(SSL_CTX_use_PrivateKey_file(ctx,</div>
<div class="line"><a id="l00695" name="l00695"></a><span class="lineno">  695</span>                                        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>,</div>
<div class="line"><a id="l00696" name="l00696"></a><span class="lineno">  696</span>                                        SSL_FILETYPE_PEM))) {</div>
<div class="line"><a id="l00697" name="l00697"></a><span class="lineno">  697</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00698" name="l00698"></a><span class="lineno">  698</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00699" name="l00699"></a><span class="lineno">  699</span>                 <span class="stringliteral">&quot;Server Private Key\n&quot;</span>,</div>
<div class="line"><a id="l00700" name="l00700"></a><span class="lineno">  700</span>                  setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>);</div>
<div class="line"><a id="l00701" name="l00701"></a><span class="lineno">  701</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00702" name="l00702"></a><span class="lineno">  702</span>      }</div>
<div class="line"><a id="l00703" name="l00703"></a><span class="lineno">  703</span>    }</div>
<div class="line"><a id="l00704" name="l00704"></a><span class="lineno">  704</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00705" name="l00705"></a><span class="lineno">  705</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00706" name="l00706"></a><span class="lineno">  706</span>           <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No Server Private Key defined\n&quot;</span>);</div>
<div class="line"><a id="l00707" name="l00707"></a><span class="lineno">  707</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00708" name="l00708"></a><span class="lineno">  708</span>    }</div>
<div class="line"><a id="l00709" name="l00709"></a><span class="lineno">  709</span> </div>
<div class="line"><a id="l00710" name="l00710"></a><span class="lineno">  710</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a> &amp;&amp;</div>
<div class="line"><a id="l00711" name="l00711"></a><span class="lineno">  711</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>[0]) {</div>
<div class="line"><a id="l00712" name="l00712"></a><span class="lineno">  712</span>      STACK_OF(X509_NAME) *cert_names;</div>
<div class="line"><a id="l00713" name="l00713"></a><span class="lineno">  713</span>      X509_STORE *st;</div>
<div class="line"><a id="l00714" name="l00714"></a><span class="lineno">  714</span>      BIO *in;</div>
<div class="line"><a id="l00715" name="l00715"></a><span class="lineno">  715</span>      X509 *x = NULL;</div>
<div class="line"><a id="l00716" name="l00716"></a><span class="lineno">  716</span>      <span class="keywordtype">char</span> *rw_var = NULL;</div>
<div class="line"><a id="l00717" name="l00717"></a><span class="lineno">  717</span>      cert_names = SSL_load_client_CA_file(setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>);</div>
<div class="line"><a id="l00718" name="l00718"></a><span class="lineno">  718</span>      <span class="keywordflow">if</span> (cert_names != NULL)</div>
<div class="line"><a id="l00719" name="l00719"></a><span class="lineno">  719</span>        SSL_CTX_set_client_CA_list(ctx, cert_names);</div>
<div class="line"><a id="l00720" name="l00720"></a><span class="lineno">  720</span>      <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00721" name="l00721"></a><span class="lineno">  721</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00722" name="l00722"></a><span class="lineno">  722</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00723" name="l00723"></a><span class="lineno">  723</span>                 <span class="stringliteral">&quot;client CA File\n&quot;</span>,</div>
<div class="line"><a id="l00724" name="l00724"></a><span class="lineno">  724</span>                  setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>);</div>
<div class="line"><a id="l00725" name="l00725"></a><span class="lineno">  725</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00726" name="l00726"></a><span class="lineno">  726</span>      }</div>
<div class="line"><a id="l00727" name="l00727"></a><span class="lineno">  727</span>      st = SSL_CTX_get_cert_store(ctx);</div>
<div class="line"><a id="l00728" name="l00728"></a><span class="lineno">  728</span>      in = BIO_new(BIO_s_file());</div>
<div class="line"><a id="l00729" name="l00729"></a><span class="lineno">  729</span>      <span class="comment">/* Need to do this to not get a compiler warning about const parameters */</span></div>
<div class="line"><a id="l00730" name="l00730"></a><span class="lineno">  730</span>      memcpy(&amp;rw_var, &amp;setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>, sizeof (rw_var));</div>
<div class="line"><a id="l00731" name="l00731"></a><span class="lineno">  731</span>      <span class="keywordflow">if</span> (!BIO_read_filename(in, rw_var)) {</div>
<div class="line"><a id="l00732" name="l00732"></a><span class="lineno">  732</span>        BIO_free(in);</div>
<div class="line"><a id="l00733" name="l00733"></a><span class="lineno">  733</span>        X509_free(x);</div>
<div class="line"><a id="l00734" name="l00734"></a><span class="lineno">  734</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00735" name="l00735"></a><span class="lineno">  735</span>      }</div>
<div class="line"><a id="l00736" name="l00736"></a><span class="lineno">  736</span> </div>
<div class="line"><a id="l00737" name="l00737"></a><span class="lineno">  737</span>      <span class="keywordflow">for</span> (;;) {</div>
<div class="line"><a id="l00738" name="l00738"></a><span class="lineno">  738</span>        <span class="keywordflow">if</span> (PEM_read_bio_X509(in, &amp;x, NULL, NULL) == NULL)</div>
<div class="line"><a id="l00739" name="l00739"></a><span class="lineno">  739</span>            <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00740" name="l00740"></a><span class="lineno">  740</span>        add_ca_to_cert_store(st, x);</div>
<div class="line"><a id="l00741" name="l00741"></a><span class="lineno">  741</span>      }</div>
<div class="line"><a id="l00742" name="l00742"></a><span class="lineno">  742</span>      BIO_free(in);</div>
<div class="line"><a id="l00743" name="l00743"></a><span class="lineno">  743</span>      X509_free(x);</div>
<div class="line"><a id="l00744" name="l00744"></a><span class="lineno">  744</span>    }</div>
<div class="line"><a id="l00745" name="l00745"></a><span class="lineno">  745</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00746" name="l00746"></a><span class="lineno">  746</span> </div>
<div class="line"><a id="l00747" name="l00747"></a><span class="lineno">  747</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980ad1bd86830b59058a381a07865bddd3b7">COAP_PKI_KEY_ASN1</a>:</div>
<div class="line"><a id="l00748" name="l00748"></a><span class="lineno">  748</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00749" name="l00749"></a><span class="lineno">  749</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">public_cert_len</a> &gt; 0) {</div>
<div class="line"><a id="l00750" name="l00750"></a><span class="lineno">  750</span>      <span class="keywordflow">if</span> (!(SSL_CTX_use_certificate_ASN1(ctx,</div>
<div class="line"><a id="l00751" name="l00751"></a><span class="lineno">  751</span>                                 setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">public_cert_len</a>,</div>
<div class="line"><a id="l00752" name="l00752"></a><span class="lineno">  752</span>                                 setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">public_cert</a>))) {</div>
<div class="line"><a id="l00753" name="l00753"></a><span class="lineno">  753</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00754" name="l00754"></a><span class="lineno">  754</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00755" name="l00755"></a><span class="lineno">  755</span>                 <span class="stringliteral">&quot;Server Certificate\n&quot;</span>,</div>
<div class="line"><a id="l00756" name="l00756"></a><span class="lineno">  756</span>                 <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00757" name="l00757"></a><span class="lineno">  757</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00758" name="l00758"></a><span class="lineno">  758</span>      }</div>
<div class="line"><a id="l00759" name="l00759"></a><span class="lineno">  759</span>    }</div>
<div class="line"><a id="l00760" name="l00760"></a><span class="lineno">  760</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00761" name="l00761"></a><span class="lineno">  761</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00762" name="l00762"></a><span class="lineno">  762</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No Server Certificate defined\n&quot;</span>);</div>
<div class="line"><a id="l00763" name="l00763"></a><span class="lineno">  763</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00764" name="l00764"></a><span class="lineno">  764</span>    }</div>
<div class="line"><a id="l00765" name="l00765"></a><span class="lineno">  765</span> </div>
<div class="line"><a id="l00766" name="l00766"></a><span class="lineno">  766</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00767" name="l00767"></a><span class="lineno">  767</span>             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a943b8a66023d48fa9fe7ff105eff24f8">private_key_len</a> &gt; 0) {</div>
<div class="line"><a id="l00768" name="l00768"></a><span class="lineno">  768</span>      <span class="keywordtype">int</span> pkey_type = map_key_type(setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a55296c7278c11f29066bdaac19b111b0">private_key_type</a>);</div>
<div class="line"><a id="l00769" name="l00769"></a><span class="lineno">  769</span>      <span class="keywordflow">if</span> (!(SSL_CTX_use_PrivateKey_ASN1(pkey_type, ctx,</div>
<div class="line"><a id="l00770" name="l00770"></a><span class="lineno">  770</span>                             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a>,</div>
<div class="line"><a id="l00771" name="l00771"></a><span class="lineno">  771</span>                             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a943b8a66023d48fa9fe7ff105eff24f8">private_key_len</a>))) {</div>
<div class="line"><a id="l00772" name="l00772"></a><span class="lineno">  772</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00773" name="l00773"></a><span class="lineno">  773</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00774" name="l00774"></a><span class="lineno">  774</span>                 <span class="stringliteral">&quot;Server Private Key\n&quot;</span>,</div>
<div class="line"><a id="l00775" name="l00775"></a><span class="lineno">  775</span>                 <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00776" name="l00776"></a><span class="lineno">  776</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00777" name="l00777"></a><span class="lineno">  777</span>      }</div>
<div class="line"><a id="l00778" name="l00778"></a><span class="lineno">  778</span>    }</div>
<div class="line"><a id="l00779" name="l00779"></a><span class="lineno">  779</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00780" name="l00780"></a><span class="lineno">  780</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00781" name="l00781"></a><span class="lineno">  781</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No Server Private Key defined\n&quot;</span>);</div>
<div class="line"><a id="l00782" name="l00782"></a><span class="lineno">  782</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00783" name="l00783"></a><span class="lineno">  783</span>    }</div>
<div class="line"><a id="l00784" name="l00784"></a><span class="lineno">  784</span> </div>
<div class="line"><a id="l00785" name="l00785"></a><span class="lineno">  785</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a9c30a93f82295a4b25b5315a1ce4cbaa">ca_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00786" name="l00786"></a><span class="lineno">  786</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa058c22c386cbb59fe33c3d17129a7fd">ca_cert_len</a> &gt; 0) {</div>
<div class="line"><a id="l00787" name="l00787"></a><span class="lineno">  787</span>      <span class="comment">/* Need to use a temp variable as it gets incremented*/</span></div>
<div class="line"><a id="l00788" name="l00788"></a><span class="lineno">  788</span>      <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *p = setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a9c30a93f82295a4b25b5315a1ce4cbaa">ca_cert</a>;</div>
<div class="line"><a id="l00789" name="l00789"></a><span class="lineno">  789</span>      X509* x509 = d2i_X509(NULL, &amp;p, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa058c22c386cbb59fe33c3d17129a7fd">ca_cert_len</a>);</div>
<div class="line"><a id="l00790" name="l00790"></a><span class="lineno">  790</span>      X509_STORE *st;</div>
<div class="line"><a id="l00791" name="l00791"></a><span class="lineno">  791</span>      <span class="keywordflow">if</span> (!x509 || !SSL_CTX_add_client_CA(ctx, x509)) {</div>
<div class="line"><a id="l00792" name="l00792"></a><span class="lineno">  792</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00793" name="l00793"></a><span class="lineno">  793</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00794" name="l00794"></a><span class="lineno">  794</span>                 <span class="stringliteral">&quot;client CA File\n&quot;</span>,</div>
<div class="line"><a id="l00795" name="l00795"></a><span class="lineno">  795</span>                  <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00796" name="l00796"></a><span class="lineno">  796</span>        X509_free(x509);</div>
<div class="line"><a id="l00797" name="l00797"></a><span class="lineno">  797</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00798" name="l00798"></a><span class="lineno">  798</span>      }</div>
<div class="line"><a id="l00799" name="l00799"></a><span class="lineno">  799</span>      st = SSL_CTX_get_cert_store(ctx);</div>
<div class="line"><a id="l00800" name="l00800"></a><span class="lineno">  800</span>      add_ca_to_cert_store(st, x509);</div>
<div class="line"><a id="l00801" name="l00801"></a><span class="lineno">  801</span>      X509_free(x509);</div>
<div class="line"><a id="l00802" name="l00802"></a><span class="lineno">  802</span>    }</div>
<div class="line"><a id="l00803" name="l00803"></a><span class="lineno">  803</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00804" name="l00804"></a><span class="lineno">  804</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l00805" name="l00805"></a><span class="lineno">  805</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00806" name="l00806"></a><span class="lineno">  806</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: Unknown key type %d\n&quot;</span>,</div>
<div class="line"><a id="l00807" name="l00807"></a><span class="lineno">  807</span>             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a>);</div>
<div class="line"><a id="l00808" name="l00808"></a><span class="lineno">  808</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00809" name="l00809"></a><span class="lineno">  809</span>  }</div>
<div class="line"><a id="l00810" name="l00810"></a><span class="lineno">  810</span> </div>
<div class="line"><a id="l00811" name="l00811"></a><span class="lineno">  811</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00812" name="l00812"></a><span class="lineno">  812</span>}</div>
<div class="line"><a id="l00813" name="l00813"></a><span class="lineno">  813</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &lt; 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l00814" name="l00814"></a><span class="lineno">  814</span> </div>
<div class="line"><a id="l00815" name="l00815"></a><span class="lineno">  815</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l00816" name="l00816"></a><span class="lineno">  816</span>setup_pki_ssl(SSL *ssl,</div>
<div class="line"><a id="l00817" name="l00817"></a><span class="lineno">  817</span>                 <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a>* setup_data, <a class="code hl_enumeration" href="group__dtls__internal.html#ga4dbea8aa6943bcf865990b5cebb6bfa4">coap_dtls_role_t</a> role</div>
<div class="line"><a id="l00818" name="l00818"></a><span class="lineno">  818</span>) {</div>
<div class="line"><a id="l00819" name="l00819"></a><span class="lineno">  819</span>  <span class="keywordflow">switch</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a>) {</div>
<div class="line"><a id="l00820" name="l00820"></a><span class="lineno">  820</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980a5685869e9efbf03fe4d05120ff810aef">COAP_PKI_KEY_PEM</a>:</div>
<div class="line"><a id="l00821" name="l00821"></a><span class="lineno">  821</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00822" name="l00822"></a><span class="lineno">  822</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>[0]) {</div>
<div class="line"><a id="l00823" name="l00823"></a><span class="lineno">  823</span>      <span class="keywordflow">if</span> (!(SSL_use_certificate_file(ssl,</div>
<div class="line"><a id="l00824" name="l00824"></a><span class="lineno">  824</span>                                   setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>,</div>
<div class="line"><a id="l00825" name="l00825"></a><span class="lineno">  825</span>                                   SSL_FILETYPE_PEM))) {</div>
<div class="line"><a id="l00826" name="l00826"></a><span class="lineno">  826</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00827" name="l00827"></a><span class="lineno">  827</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00828" name="l00828"></a><span class="lineno">  828</span>                 <span class="stringliteral">&quot;%s Certificate\n&quot;</span>,</div>
<div class="line"><a id="l00829" name="l00829"></a><span class="lineno">  829</span>                 setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>,</div>
<div class="line"><a id="l00830" name="l00830"></a><span class="lineno">  830</span>                 role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00831" name="l00831"></a><span class="lineno">  831</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00832" name="l00832"></a><span class="lineno">  832</span>      }</div>
<div class="line"><a id="l00833" name="l00833"></a><span class="lineno">  833</span>    }</div>
<div class="line"><a id="l00834" name="l00834"></a><span class="lineno">  834</span>    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ||</div>
<div class="line"><a id="l00835" name="l00835"></a><span class="lineno">  835</span>             (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00836" name="l00836"></a><span class="lineno">  836</span>              setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>[0])) {</div>
<div class="line"><a id="l00837" name="l00837"></a><span class="lineno">  837</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00838" name="l00838"></a><span class="lineno">  838</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No %s Certificate defined\n&quot;</span>,</div>
<div class="line"><a id="l00839" name="l00839"></a><span class="lineno">  839</span>             role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00840" name="l00840"></a><span class="lineno">  840</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00841" name="l00841"></a><span class="lineno">  841</span>    }</div>
<div class="line"><a id="l00842" name="l00842"></a><span class="lineno">  842</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00843" name="l00843"></a><span class="lineno">  843</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>[0]) {</div>
<div class="line"><a id="l00844" name="l00844"></a><span class="lineno">  844</span>      <span class="keywordflow">if</span> (!(SSL_use_PrivateKey_file(ssl,</div>
<div class="line"><a id="l00845" name="l00845"></a><span class="lineno">  845</span>                                  setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>,</div>
<div class="line"><a id="l00846" name="l00846"></a><span class="lineno">  846</span>                                  SSL_FILETYPE_PEM))) {</div>
<div class="line"><a id="l00847" name="l00847"></a><span class="lineno">  847</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00848" name="l00848"></a><span class="lineno">  848</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00849" name="l00849"></a><span class="lineno">  849</span>                 <span class="stringliteral">&quot;Client Private Key\n&quot;</span>,</div>
<div class="line"><a id="l00850" name="l00850"></a><span class="lineno">  850</span>                  setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">private_key</a>);</div>
<div class="line"><a id="l00851" name="l00851"></a><span class="lineno">  851</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00852" name="l00852"></a><span class="lineno">  852</span>      }</div>
<div class="line"><a id="l00853" name="l00853"></a><span class="lineno">  853</span>    }</div>
<div class="line"><a id="l00854" name="l00854"></a><span class="lineno">  854</span>    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ||</div>
<div class="line"><a id="l00855" name="l00855"></a><span class="lineno">  855</span>             (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00856" name="l00856"></a><span class="lineno">  856</span>              setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">public_cert</a>[0])) {</div>
<div class="line"><a id="l00857" name="l00857"></a><span class="lineno">  857</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00858" name="l00858"></a><span class="lineno">  858</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No %s Private Key defined\n&quot;</span>,</div>
<div class="line"><a id="l00859" name="l00859"></a><span class="lineno">  859</span>             role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00860" name="l00860"></a><span class="lineno">  860</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00861" name="l00861"></a><span class="lineno">  861</span>    }</div>
<div class="line"><a id="l00862" name="l00862"></a><span class="lineno">  862</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a> &amp;&amp;</div>
<div class="line"><a id="l00863" name="l00863"></a><span class="lineno">  863</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>[0]) {</div>
<div class="line"><a id="l00864" name="l00864"></a><span class="lineno">  864</span>      X509_STORE *st;</div>
<div class="line"><a id="l00865" name="l00865"></a><span class="lineno">  865</span>      BIO *in;</div>
<div class="line"><a id="l00866" name="l00866"></a><span class="lineno">  866</span>      X509 *x = NULL;</div>
<div class="line"><a id="l00867" name="l00867"></a><span class="lineno">  867</span>      <span class="keywordtype">char</span> *rw_var = NULL;</div>
<div class="line"><a id="l00868" name="l00868"></a><span class="lineno">  868</span>      SSL_CTX *ctx = SSL_get_SSL_CTX(ssl);</div>
<div class="line"><a id="l00869" name="l00869"></a><span class="lineno">  869</span> </div>
<div class="line"><a id="l00870" name="l00870"></a><span class="lineno">  870</span>      <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a>) {</div>
<div class="line"><a id="l00871" name="l00871"></a><span class="lineno">  871</span>        STACK_OF(X509_NAME) *cert_names = SSL_load_client_CA_file(setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>);</div>
<div class="line"><a id="l00872" name="l00872"></a><span class="lineno">  872</span> </div>
<div class="line"><a id="l00873" name="l00873"></a><span class="lineno">  873</span>        <span class="keywordflow">if</span> (cert_names != NULL)</div>
<div class="line"><a id="l00874" name="l00874"></a><span class="lineno">  874</span>          SSL_set_client_CA_list(ssl, cert_names);</div>
<div class="line"><a id="l00875" name="l00875"></a><span class="lineno">  875</span>        <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l00876" name="l00876"></a><span class="lineno">  876</span>          <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00877" name="l00877"></a><span class="lineno">  877</span>                   <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00878" name="l00878"></a><span class="lineno">  878</span>                   <span class="stringliteral">&quot;%s CA File\n&quot;</span>,</div>
<div class="line"><a id="l00879" name="l00879"></a><span class="lineno">  879</span>                    setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>,</div>
<div class="line"><a id="l00880" name="l00880"></a><span class="lineno">  880</span>                    role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00881" name="l00881"></a><span class="lineno">  881</span>          <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00882" name="l00882"></a><span class="lineno">  882</span>        }</div>
<div class="line"><a id="l00883" name="l00883"></a><span class="lineno">  883</span>      }</div>
<div class="line"><a id="l00884" name="l00884"></a><span class="lineno">  884</span> </div>
<div class="line"><a id="l00885" name="l00885"></a><span class="lineno">  885</span>      <span class="comment">/* Add CA to the trusted root CA store */</span></div>
<div class="line"><a id="l00886" name="l00886"></a><span class="lineno">  886</span>      in = BIO_new(BIO_s_file());</div>
<div class="line"><a id="l00887" name="l00887"></a><span class="lineno">  887</span>      <span class="comment">/* Need to do this to not get a compiler warning about const parameters */</span></div>
<div class="line"><a id="l00888" name="l00888"></a><span class="lineno">  888</span>      memcpy(&amp;rw_var, &amp;setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>.<a class="code hl_variable" href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">ca_file</a>, sizeof (rw_var));</div>
<div class="line"><a id="l00889" name="l00889"></a><span class="lineno">  889</span>      <span class="keywordflow">if</span> (!BIO_read_filename(in, rw_var)) {</div>
<div class="line"><a id="l00890" name="l00890"></a><span class="lineno">  890</span>        BIO_free(in);</div>
<div class="line"><a id="l00891" name="l00891"></a><span class="lineno">  891</span>        X509_free(x);</div>
<div class="line"><a id="l00892" name="l00892"></a><span class="lineno">  892</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00893" name="l00893"></a><span class="lineno">  893</span>      }</div>
<div class="line"><a id="l00894" name="l00894"></a><span class="lineno">  894</span>      st = SSL_CTX_get_cert_store(ctx);</div>
<div class="line"><a id="l00895" name="l00895"></a><span class="lineno">  895</span>      <span class="keywordflow">for</span> (;;) {</div>
<div class="line"><a id="l00896" name="l00896"></a><span class="lineno">  896</span>        <span class="keywordflow">if</span> (PEM_read_bio_X509(in, &amp;x, NULL, NULL) == NULL)</div>
<div class="line"><a id="l00897" name="l00897"></a><span class="lineno">  897</span>            <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00898" name="l00898"></a><span class="lineno">  898</span>        add_ca_to_cert_store(st, x);</div>
<div class="line"><a id="l00899" name="l00899"></a><span class="lineno">  899</span>      }</div>
<div class="line"><a id="l00900" name="l00900"></a><span class="lineno">  900</span>      BIO_free(in);</div>
<div class="line"><a id="l00901" name="l00901"></a><span class="lineno">  901</span>      X509_free(x);</div>
<div class="line"><a id="l00902" name="l00902"></a><span class="lineno">  902</span>    }</div>
<div class="line"><a id="l00903" name="l00903"></a><span class="lineno">  903</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00904" name="l00904"></a><span class="lineno">  904</span> </div>
<div class="line"><a id="l00905" name="l00905"></a><span class="lineno">  905</span>  <span class="keywordflow">case</span> <a class="code hl_enumvalue" href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980ad1bd86830b59058a381a07865bddd3b7">COAP_PKI_KEY_ASN1</a>:</div>
<div class="line"><a id="l00906" name="l00906"></a><span class="lineno">  906</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00907" name="l00907"></a><span class="lineno">  907</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">public_cert_len</a> &gt; 0) {</div>
<div class="line"><a id="l00908" name="l00908"></a><span class="lineno">  908</span>      <span class="keywordflow">if</span> (!(SSL_use_certificate_ASN1(ssl,</div>
<div class="line"><a id="l00909" name="l00909"></a><span class="lineno">  909</span>                           setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">public_cert</a>,</div>
<div class="line"><a id="l00910" name="l00910"></a><span class="lineno">  910</span>                           setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">public_cert_len</a>))) {</div>
<div class="line"><a id="l00911" name="l00911"></a><span class="lineno">  911</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00912" name="l00912"></a><span class="lineno">  912</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00913" name="l00913"></a><span class="lineno">  913</span>                 <span class="stringliteral">&quot;%s Certificate\n&quot;</span>,</div>
<div class="line"><a id="l00914" name="l00914"></a><span class="lineno">  914</span>                 role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>,</div>
<div class="line"><a id="l00915" name="l00915"></a><span class="lineno">  915</span>                 <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00916" name="l00916"></a><span class="lineno">  916</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00917" name="l00917"></a><span class="lineno">  917</span>      }</div>
<div class="line"><a id="l00918" name="l00918"></a><span class="lineno">  918</span>    }</div>
<div class="line"><a id="l00919" name="l00919"></a><span class="lineno">  919</span>    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ||</div>
<div class="line"><a id="l00920" name="l00920"></a><span class="lineno">  920</span>             (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00921" name="l00921"></a><span class="lineno">  921</span>              setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a>[0])) {</div>
<div class="line"><a id="l00922" name="l00922"></a><span class="lineno">  922</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00923" name="l00923"></a><span class="lineno">  923</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No %s Certificate defined\n&quot;</span>,</div>
<div class="line"><a id="l00924" name="l00924"></a><span class="lineno">  924</span>             role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00925" name="l00925"></a><span class="lineno">  925</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00926" name="l00926"></a><span class="lineno">  926</span>    }</div>
<div class="line"><a id="l00927" name="l00927"></a><span class="lineno">  927</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a> &amp;&amp;</div>
<div class="line"><a id="l00928" name="l00928"></a><span class="lineno">  928</span>             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a943b8a66023d48fa9fe7ff105eff24f8">private_key_len</a> &gt; 0) {</div>
<div class="line"><a id="l00929" name="l00929"></a><span class="lineno">  929</span>      <span class="keywordtype">int</span> pkey_type = map_key_type(setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a55296c7278c11f29066bdaac19b111b0">private_key_type</a>);</div>
<div class="line"><a id="l00930" name="l00930"></a><span class="lineno">  930</span>      <span class="keywordflow">if</span> (!(SSL_use_PrivateKey_ASN1(pkey_type, ssl,</div>
<div class="line"><a id="l00931" name="l00931"></a><span class="lineno">  931</span>                        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">private_key</a>,</div>
<div class="line"><a id="l00932" name="l00932"></a><span class="lineno">  932</span>                        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a943b8a66023d48fa9fe7ff105eff24f8">private_key_len</a>))) {</div>
<div class="line"><a id="l00933" name="l00933"></a><span class="lineno">  933</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00934" name="l00934"></a><span class="lineno">  934</span>                 <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00935" name="l00935"></a><span class="lineno">  935</span>                 <span class="stringliteral">&quot;%s Private Key\n&quot;</span>,</div>
<div class="line"><a id="l00936" name="l00936"></a><span class="lineno">  936</span>                 role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>,</div>
<div class="line"><a id="l00937" name="l00937"></a><span class="lineno">  937</span>                 <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00938" name="l00938"></a><span class="lineno">  938</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00939" name="l00939"></a><span class="lineno">  939</span>      }</div>
<div class="line"><a id="l00940" name="l00940"></a><span class="lineno">  940</span>    }</div>
<div class="line"><a id="l00941" name="l00941"></a><span class="lineno">  941</span>    <span class="keywordflow">else</span> <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ||</div>
<div class="line"><a id="l00942" name="l00942"></a><span class="lineno">  942</span>             (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">public_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00943" name="l00943"></a><span class="lineno">  943</span>              setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">public_cert_len</a> &gt; 0)) {</div>
<div class="line"><a id="l00944" name="l00944"></a><span class="lineno">  944</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00945" name="l00945"></a><span class="lineno">  945</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: No %s Private Key defined&quot;</span>,</div>
<div class="line"><a id="l00946" name="l00946"></a><span class="lineno">  946</span>             role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a> ? <span class="stringliteral">&quot;Server&quot;</span> : <span class="stringliteral">&quot;Client&quot;</span>);</div>
<div class="line"><a id="l00947" name="l00947"></a><span class="lineno">  947</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00948" name="l00948"></a><span class="lineno">  948</span>    }</div>
<div class="line"><a id="l00949" name="l00949"></a><span class="lineno">  949</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a9c30a93f82295a4b25b5315a1ce4cbaa">ca_cert</a> &amp;&amp;</div>
<div class="line"><a id="l00950" name="l00950"></a><span class="lineno">  950</span>        setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa058c22c386cbb59fe33c3d17129a7fd">ca_cert_len</a> &gt; 0) {</div>
<div class="line"><a id="l00951" name="l00951"></a><span class="lineno">  951</span>      <span class="comment">/* Need to use a temp variable as it gets incremented*/</span></div>
<div class="line"><a id="l00952" name="l00952"></a><span class="lineno">  952</span>      <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *p = setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#a9c30a93f82295a4b25b5315a1ce4cbaa">ca_cert</a>;</div>
<div class="line"><a id="l00953" name="l00953"></a><span class="lineno">  953</span>      X509* x509 = d2i_X509(NULL, &amp;p, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>.<a class="code hl_variable" href="structcoap__pki__key__asn1__t.html#aa058c22c386cbb59fe33c3d17129a7fd">ca_cert_len</a>);</div>
<div class="line"><a id="l00954" name="l00954"></a><span class="lineno">  954</span>      X509_STORE *st;</div>
<div class="line"><a id="l00955" name="l00955"></a><span class="lineno">  955</span>      SSL_CTX *ctx = SSL_get_SSL_CTX(ssl);</div>
<div class="line"><a id="l00956" name="l00956"></a><span class="lineno">  956</span> </div>
<div class="line"><a id="l00957" name="l00957"></a><span class="lineno">  957</span>      <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a>) {</div>
<div class="line"><a id="l00958" name="l00958"></a><span class="lineno">  958</span>        <span class="keywordflow">if</span> (!x509 || !SSL_add_client_CA(ssl, x509)) {</div>
<div class="line"><a id="l00959" name="l00959"></a><span class="lineno">  959</span>          <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l00960" name="l00960"></a><span class="lineno">  960</span>                   <span class="stringliteral">&quot;*** setup_pki: (D)TLS: %s: Unable to configure &quot;</span></div>
<div class="line"><a id="l00961" name="l00961"></a><span class="lineno">  961</span>                   <span class="stringliteral">&quot;client CA File\n&quot;</span>,</div>
<div class="line"><a id="l00962" name="l00962"></a><span class="lineno">  962</span>                    <span class="stringliteral">&quot;ASN1&quot;</span>);</div>
<div class="line"><a id="l00963" name="l00963"></a><span class="lineno">  963</span>          X509_free(x509);</div>
<div class="line"><a id="l00964" name="l00964"></a><span class="lineno">  964</span>          <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00965" name="l00965"></a><span class="lineno">  965</span>        }</div>
<div class="line"><a id="l00966" name="l00966"></a><span class="lineno">  966</span>      }</div>
<div class="line"><a id="l00967" name="l00967"></a><span class="lineno">  967</span> </div>
<div class="line"><a id="l00968" name="l00968"></a><span class="lineno">  968</span>      <span class="comment">/* Add CA to the trusted root CA store */</span></div>
<div class="line"><a id="l00969" name="l00969"></a><span class="lineno">  969</span>      st = SSL_CTX_get_cert_store(ctx);</div>
<div class="line"><a id="l00970" name="l00970"></a><span class="lineno">  970</span>      add_ca_to_cert_store(st, x509);</div>
<div class="line"><a id="l00971" name="l00971"></a><span class="lineno">  971</span>      X509_free(x509);</div>
<div class="line"><a id="l00972" name="l00972"></a><span class="lineno">  972</span>    }</div>
<div class="line"><a id="l00973" name="l00973"></a><span class="lineno">  973</span>    <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l00974" name="l00974"></a><span class="lineno">  974</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l00975" name="l00975"></a><span class="lineno">  975</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a>,</div>
<div class="line"><a id="l00976" name="l00976"></a><span class="lineno">  976</span>             <span class="stringliteral">&quot;*** setup_pki: (D)TLS: Unknown key type %d\n&quot;</span>,</div>
<div class="line"><a id="l00977" name="l00977"></a><span class="lineno">  977</span>             setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a>);</div>
<div class="line"><a id="l00978" name="l00978"></a><span class="lineno">  978</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l00979" name="l00979"></a><span class="lineno">  979</span>  }</div>
<div class="line"><a id="l00980" name="l00980"></a><span class="lineno">  980</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l00981" name="l00981"></a><span class="lineno">  981</span>}</div>
<div class="line"><a id="l00982" name="l00982"></a><span class="lineno">  982</span> </div>
<div class="line"><a id="l00983" name="l00983"></a><span class="lineno">  983</span><span class="keyword">static</span> <span class="keywordtype">char</span>*</div>
<div class="line"><a id="l00984" name="l00984"></a><span class="lineno">  984</span>get_common_name_from_cert(X509* x509) {</div>
<div class="line"><a id="l00985" name="l00985"></a><span class="lineno">  985</span>  <span class="keywordflow">if</span> (x509) {</div>
<div class="line"><a id="l00986" name="l00986"></a><span class="lineno">  986</span>    <span class="keywordtype">char</span> *cn;</div>
<div class="line"><a id="l00987" name="l00987"></a><span class="lineno">  987</span>    <span class="keywordtype">int</span> n;</div>
<div class="line"><a id="l00988" name="l00988"></a><span class="lineno">  988</span>    STACK_OF(GENERAL_NAME) *san_list;</div>
<div class="line"><a id="l00989" name="l00989"></a><span class="lineno">  989</span>    <span class="keywordtype">char</span> buffer[256];</div>
<div class="line"><a id="l00990" name="l00990"></a><span class="lineno">  990</span> </div>
<div class="line"><a id="l00991" name="l00991"></a><span class="lineno">  991</span>    san_list = X509_get_ext_d2i(x509, NID_subject_alt_name, NULL, NULL);</div>
<div class="line"><a id="l00992" name="l00992"></a><span class="lineno">  992</span>    <span class="keywordflow">if</span> (san_list) {</div>
<div class="line"><a id="l00993" name="l00993"></a><span class="lineno">  993</span>      <span class="keywordtype">int</span> san_count = sk_GENERAL_NAME_num(san_list);</div>
<div class="line"><a id="l00994" name="l00994"></a><span class="lineno">  994</span> </div>
<div class="line"><a id="l00995" name="l00995"></a><span class="lineno">  995</span>      <span class="keywordflow">for</span> (n = 0; n &lt; san_count; n++) {</div>
<div class="line"><a id="l00996" name="l00996"></a><span class="lineno">  996</span>        <span class="keyword">const</span> GENERAL_NAME * name = sk_GENERAL_NAME_value (san_list, n);</div>
<div class="line"><a id="l00997" name="l00997"></a><span class="lineno">  997</span> </div>
<div class="line"><a id="l00998" name="l00998"></a><span class="lineno">  998</span>        <span class="keywordflow">if</span> (name-&gt;type == GEN_DNS) {</div>
<div class="line"><a id="l00999" name="l00999"></a><span class="lineno">  999</span>          <span class="keyword">const</span> <span class="keywordtype">char</span> *dns_name = (<span class="keyword">const</span> <span class="keywordtype">char</span> *)ASN1_STRING_get0_data(name-&gt;d.dNSName);</div>
<div class="line"><a id="l01000" name="l01000"></a><span class="lineno"> 1000</span> </div>
<div class="line"><a id="l01001" name="l01001"></a><span class="lineno"> 1001</span>          <span class="comment">/* Make sure that there is not an embedded NUL in the dns_name */</span></div>
<div class="line"><a id="l01002" name="l01002"></a><span class="lineno"> 1002</span>          <span class="keywordflow">if</span> (ASN1_STRING_length(name-&gt;d.dNSName) != (int)strlen (dns_name))</div>
<div class="line"><a id="l01003" name="l01003"></a><span class="lineno"> 1003</span>            <span class="keywordflow">continue</span>;</div>
<div class="line"><a id="l01004" name="l01004"></a><span class="lineno"> 1004</span>          cn = OPENSSL_strdup(dns_name);</div>
<div class="line"><a id="l01005" name="l01005"></a><span class="lineno"> 1005</span>          sk_GENERAL_NAME_pop_free(san_list, GENERAL_NAME_free);</div>
<div class="line"><a id="l01006" name="l01006"></a><span class="lineno"> 1006</span>          <span class="keywordflow">return</span> cn;</div>
<div class="line"><a id="l01007" name="l01007"></a><span class="lineno"> 1007</span>        }</div>
<div class="line"><a id="l01008" name="l01008"></a><span class="lineno"> 1008</span>      }</div>
<div class="line"><a id="l01009" name="l01009"></a><span class="lineno"> 1009</span>      sk_GENERAL_NAME_pop_free(san_list, GENERAL_NAME_free);</div>
<div class="line"><a id="l01010" name="l01010"></a><span class="lineno"> 1010</span>    }</div>
<div class="line"><a id="l01011" name="l01011"></a><span class="lineno"> 1011</span>    <span class="comment">/* Otherwise look for the CN= field */</span></div>
<div class="line"><a id="l01012" name="l01012"></a><span class="lineno"> 1012</span>    X509_NAME_oneline(X509_get_subject_name(x509), buffer, <span class="keyword">sizeof</span>(buffer));</div>
<div class="line"><a id="l01013" name="l01013"></a><span class="lineno"> 1013</span> </div>
<div class="line"><a id="l01014" name="l01014"></a><span class="lineno"> 1014</span>    <span class="comment">/* Need to emulate strcasestr() here.  Looking for CN= */</span></div>
<div class="line"><a id="l01015" name="l01015"></a><span class="lineno"> 1015</span>    n = strlen(buffer) - 3;</div>
<div class="line"><a id="l01016" name="l01016"></a><span class="lineno"> 1016</span>    cn = buffer;</div>
<div class="line"><a id="l01017" name="l01017"></a><span class="lineno"> 1017</span>    <span class="keywordflow">while</span> (n &gt; 0) {</div>
<div class="line"><a id="l01018" name="l01018"></a><span class="lineno"> 1018</span>      <span class="keywordflow">if</span> (((cn[0] == <span class="charliteral">&#39;C&#39;</span>) || (cn[0] == <span class="charliteral">&#39;c&#39;</span>)) &amp;&amp;</div>
<div class="line"><a id="l01019" name="l01019"></a><span class="lineno"> 1019</span>          ((cn[1] == <span class="charliteral">&#39;N&#39;</span>) || (cn[1] == <span class="charliteral">&#39;n&#39;</span>)) &amp;&amp;</div>
<div class="line"><a id="l01020" name="l01020"></a><span class="lineno"> 1020</span>          (cn[2] == <span class="charliteral">&#39;=&#39;</span>)) {</div>
<div class="line"><a id="l01021" name="l01021"></a><span class="lineno"> 1021</span>        cn += 3;</div>
<div class="line"><a id="l01022" name="l01022"></a><span class="lineno"> 1022</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01023" name="l01023"></a><span class="lineno"> 1023</span>      }</div>
<div class="line"><a id="l01024" name="l01024"></a><span class="lineno"> 1024</span>      cn++;</div>
<div class="line"><a id="l01025" name="l01025"></a><span class="lineno"> 1025</span>      n--;</div>
<div class="line"><a id="l01026" name="l01026"></a><span class="lineno"> 1026</span>    }</div>
<div class="line"><a id="l01027" name="l01027"></a><span class="lineno"> 1027</span>    <span class="keywordflow">if</span> (n &gt; 0) {</div>
<div class="line"><a id="l01028" name="l01028"></a><span class="lineno"> 1028</span>      <span class="keywordtype">char</span> * ecn = strchr(cn, <span class="charliteral">&#39;/&#39;</span>);</div>
<div class="line"><a id="l01029" name="l01029"></a><span class="lineno"> 1029</span>      <span class="keywordflow">if</span> (ecn) {</div>
<div class="line"><a id="l01030" name="l01030"></a><span class="lineno"> 1030</span>        <span class="keywordflow">return</span> OPENSSL_strndup(cn, ecn-cn);</div>
<div class="line"><a id="l01031" name="l01031"></a><span class="lineno"> 1031</span>      }</div>
<div class="line"><a id="l01032" name="l01032"></a><span class="lineno"> 1032</span>      <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01033" name="l01033"></a><span class="lineno"> 1033</span>        <span class="keywordflow">return</span> OPENSSL_strdup(cn);</div>
<div class="line"><a id="l01034" name="l01034"></a><span class="lineno"> 1034</span>      }</div>
<div class="line"><a id="l01035" name="l01035"></a><span class="lineno"> 1035</span>    }</div>
<div class="line"><a id="l01036" name="l01036"></a><span class="lineno"> 1036</span>  }</div>
<div class="line"><a id="l01037" name="l01037"></a><span class="lineno"> 1037</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l01038" name="l01038"></a><span class="lineno"> 1038</span>}</div>
<div class="line"><a id="l01039" name="l01039"></a><span class="lineno"> 1039</span> </div>
<div class="line"><a id="l01040" name="l01040"></a><span class="lineno"> 1040</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l01041" name="l01041"></a><span class="lineno"> 1041</span>tls_verify_call_back(<span class="keywordtype">int</span> preverify_ok, X509_STORE_CTX *ctx) {</div>
<div class="line"><a id="l01042" name="l01042"></a><span class="lineno"> 1042</span>  SSL *ssl = X509_STORE_CTX_get_ex_data(ctx,</div>
<div class="line"><a id="l01043" name="l01043"></a><span class="lineno"> 1043</span>                              SSL_get_ex_data_X509_STORE_CTX_idx());</div>
<div class="line"><a id="l01044" name="l01044"></a><span class="lineno"> 1044</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = SSL_get_app_data(ssl);</div>
<div class="line"><a id="l01045" name="l01045"></a><span class="lineno"> 1045</span>  coap_openssl_context_t *context =</div>
<div class="line"><a id="l01046" name="l01046"></a><span class="lineno"> 1046</span>           ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01047" name="l01047"></a><span class="lineno"> 1047</span>  <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data = &amp;context-&gt;setup_data;</div>
<div class="line"><a id="l01048" name="l01048"></a><span class="lineno"> 1048</span>  <span class="keywordtype">int</span> depth = X509_STORE_CTX_get_error_depth(ctx);</div>
<div class="line"><a id="l01049" name="l01049"></a><span class="lineno"> 1049</span>  <span class="keywordtype">int</span> err = X509_STORE_CTX_get_error(ctx);</div>
<div class="line"><a id="l01050" name="l01050"></a><span class="lineno"> 1050</span>  X509 *x509 = X509_STORE_CTX_get_current_cert(ctx);</div>
<div class="line"><a id="l01051" name="l01051"></a><span class="lineno"> 1051</span>  <span class="keywordtype">char</span> *cn = get_common_name_from_cert(x509);</div>
<div class="line"><a id="l01052" name="l01052"></a><span class="lineno"> 1052</span>  <span class="keywordtype">int</span> keep_preverify_ok = preverify_ok;</div>
<div class="line"><a id="l01053" name="l01053"></a><span class="lineno"> 1053</span> </div>
<div class="line"><a id="l01054" name="l01054"></a><span class="lineno"> 1054</span>  <span class="keywordflow">if</span> (!preverify_ok) {</div>
<div class="line"><a id="l01055" name="l01055"></a><span class="lineno"> 1055</span>    <span class="keywordflow">switch</span> (err) {</div>
<div class="line"><a id="l01056" name="l01056"></a><span class="lineno"> 1056</span>    <span class="keywordflow">case</span> X509_V_ERR_CERT_NOT_YET_VALID:</div>
<div class="line"><a id="l01057" name="l01057"></a><span class="lineno"> 1057</span>    <span class="keywordflow">case</span> X509_V_ERR_CERT_HAS_EXPIRED:</div>
<div class="line"><a id="l01058" name="l01058"></a><span class="lineno"> 1058</span>      <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#aa92df455480e1ce202d48fbac3ee5422">allow_expired_certs</a>)</div>
<div class="line"><a id="l01059" name="l01059"></a><span class="lineno"> 1059</span>        preverify_ok = 1;</div>
<div class="line"><a id="l01060" name="l01060"></a><span class="lineno"> 1060</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01061" name="l01061"></a><span class="lineno"> 1061</span>    <span class="keywordflow">case</span> X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN:</div>
<div class="line"><a id="l01062" name="l01062"></a><span class="lineno"> 1062</span>      <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ad125a6d4424f2603a9ff9df7338fd312">allow_self_signed</a>)</div>
<div class="line"><a id="l01063" name="l01063"></a><span class="lineno"> 1063</span>        preverify_ok = 1;</div>
<div class="line"><a id="l01064" name="l01064"></a><span class="lineno"> 1064</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01065" name="l01065"></a><span class="lineno"> 1065</span>    <span class="keywordflow">case</span> X509_V_ERR_UNABLE_TO_GET_CRL:</div>
<div class="line"><a id="l01066" name="l01066"></a><span class="lineno"> 1066</span>      <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a1125f0a08bf12be0a1a0cb63a4f3f2af">allow_no_crl</a>)</div>
<div class="line"><a id="l01067" name="l01067"></a><span class="lineno"> 1067</span>        preverify_ok = 1;</div>
<div class="line"><a id="l01068" name="l01068"></a><span class="lineno"> 1068</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01069" name="l01069"></a><span class="lineno"> 1069</span>    <span class="keywordflow">case</span> X509_V_ERR_CRL_NOT_YET_VALID:</div>
<div class="line"><a id="l01070" name="l01070"></a><span class="lineno"> 1070</span>    <span class="keywordflow">case</span> X509_V_ERR_CRL_HAS_EXPIRED:</div>
<div class="line"><a id="l01071" name="l01071"></a><span class="lineno"> 1071</span>      <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ae1ae69b200d26250747f8602af02e990">allow_expired_crl</a>)</div>
<div class="line"><a id="l01072" name="l01072"></a><span class="lineno"> 1072</span>        preverify_ok = 1;</div>
<div class="line"><a id="l01073" name="l01073"></a><span class="lineno"> 1073</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01074" name="l01074"></a><span class="lineno"> 1074</span>    <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l01075" name="l01075"></a><span class="lineno"> 1075</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01076" name="l01076"></a><span class="lineno"> 1076</span>    }</div>
<div class="line"><a id="l01077" name="l01077"></a><span class="lineno"> 1077</span>    <span class="keywordflow">if</span> (!preverify_ok) {</div>
<div class="line"><a id="l01078" name="l01078"></a><span class="lineno"> 1078</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l01079" name="l01079"></a><span class="lineno"> 1079</span>               <span class="stringliteral">&quot;    %s: %s: &#39;%s&#39; depth=%d\n&quot;</span>,</div>
<div class="line"><a id="l01080" name="l01080"></a><span class="lineno"> 1080</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session),</div>
<div class="line"><a id="l01081" name="l01081"></a><span class="lineno"> 1081</span>               X509_verify_cert_error_string(err), cn ? cn : <span class="stringliteral">&quot;?&quot;</span>, depth);</div>
<div class="line"><a id="l01082" name="l01082"></a><span class="lineno"> 1082</span>        <span class="comment">/* Invoke the CN callback function for this failure */</span></div>
<div class="line"><a id="l01083" name="l01083"></a><span class="lineno"> 1083</span>        keep_preverify_ok = 1;</div>
<div class="line"><a id="l01084" name="l01084"></a><span class="lineno"> 1084</span>    }</div>
<div class="line"><a id="l01085" name="l01085"></a><span class="lineno"> 1085</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01086" name="l01086"></a><span class="lineno"> 1086</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l01087" name="l01087"></a><span class="lineno"> 1087</span>               <span class="stringliteral">&quot;    %s: %s: overridden: &#39;%s&#39; depth=%d\n&quot;</span>,</div>
<div class="line"><a id="l01088" name="l01088"></a><span class="lineno"> 1088</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session),</div>
<div class="line"><a id="l01089" name="l01089"></a><span class="lineno"> 1089</span>               X509_verify_cert_error_string(err), cn ? cn : <span class="stringliteral">&quot;?&quot;</span>, depth);</div>
<div class="line"><a id="l01090" name="l01090"></a><span class="lineno"> 1090</span>    }</div>
<div class="line"><a id="l01091" name="l01091"></a><span class="lineno"> 1091</span>  }</div>
<div class="line"><a id="l01092" name="l01092"></a><span class="lineno"> 1092</span>  <span class="comment">/* Certificate - depth == 0 is the Client Cert */</span></div>
<div class="line"><a id="l01093" name="l01093"></a><span class="lineno"> 1093</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ae136f22847af5f51ded7b3f19bc538df">validate_cn_call_back</a> &amp;&amp; keep_preverify_ok) {</div>
<div class="line"><a id="l01094" name="l01094"></a><span class="lineno"> 1094</span>    <span class="keywordtype">int</span> length = i2d_X509(x509, NULL);</div>
<div class="line"><a id="l01095" name="l01095"></a><span class="lineno"> 1095</span>    <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *base_buf;</div>
<div class="line"><a id="l01096" name="l01096"></a><span class="lineno"> 1096</span>    <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *base_buf2 = base_buf = OPENSSL_malloc(length);</div>
<div class="line"><a id="l01097" name="l01097"></a><span class="lineno"> 1097</span> </div>
<div class="line"><a id="l01098" name="l01098"></a><span class="lineno"> 1098</span>    <span class="comment">/* base_buf2 gets moved to the end */</span></div>
<div class="line"><a id="l01099" name="l01099"></a><span class="lineno"> 1099</span>    i2d_X509(x509, &amp;base_buf2);</div>
<div class="line"><a id="l01100" name="l01100"></a><span class="lineno"> 1100</span>    <span class="keywordflow">if</span> (!setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ae136f22847af5f51ded7b3f19bc538df">validate_cn_call_back</a>(cn, base_buf, length, session,</div>
<div class="line"><a id="l01101" name="l01101"></a><span class="lineno"> 1101</span>                                           depth, preverify_ok,</div>
<div class="line"><a id="l01102" name="l01102"></a><span class="lineno"> 1102</span>                                           setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a16fb73f2ceb8aafed7256cdf9ffec8f6">cn_call_back_arg</a>)) {</div>
<div class="line"><a id="l01103" name="l01103"></a><span class="lineno"> 1103</span>      <span class="keywordflow">if</span> (depth == 0) {</div>
<div class="line"><a id="l01104" name="l01104"></a><span class="lineno"> 1104</span>        X509_STORE_CTX_set_error(ctx, X509_V_ERR_CERT_REJECTED);</div>
<div class="line"><a id="l01105" name="l01105"></a><span class="lineno"> 1105</span>      }</div>
<div class="line"><a id="l01106" name="l01106"></a><span class="lineno"> 1106</span>      <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01107" name="l01107"></a><span class="lineno"> 1107</span>        X509_STORE_CTX_set_error(ctx, X509_V_ERR_INVALID_CA);</div>
<div class="line"><a id="l01108" name="l01108"></a><span class="lineno"> 1108</span>      }</div>
<div class="line"><a id="l01109" name="l01109"></a><span class="lineno"> 1109</span>      preverify_ok = 0;</div>
<div class="line"><a id="l01110" name="l01110"></a><span class="lineno"> 1110</span>    }</div>
<div class="line"><a id="l01111" name="l01111"></a><span class="lineno"> 1111</span>    OPENSSL_free(base_buf);</div>
<div class="line"><a id="l01112" name="l01112"></a><span class="lineno"> 1112</span>  }</div>
<div class="line"><a id="l01113" name="l01113"></a><span class="lineno"> 1113</span>  OPENSSL_free(cn);</div>
<div class="line"><a id="l01114" name="l01114"></a><span class="lineno"> 1114</span>  <span class="keywordflow">return</span> preverify_ok;</div>
<div class="line"><a id="l01115" name="l01115"></a><span class="lineno"> 1115</span>}</div>
<div class="line"><a id="l01116" name="l01116"></a><span class="lineno"> 1116</span> </div>
<div class="line"><a id="l01117" name="l01117"></a><span class="lineno"> 1117</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01118" name="l01118"></a><span class="lineno"> 1118</span><span class="comment">/*</span></div>
<div class="line"><a id="l01119" name="l01119"></a><span class="lineno"> 1119</span><span class="comment"> * During the SSL/TLS initial negotiations, tls_secret_call_back() is called so</span></div>
<div class="line"><a id="l01120" name="l01120"></a><span class="lineno"> 1120</span><span class="comment"> * it is possible to determine whether this is a PKI or PSK incoming</span></div>
<div class="line"><a id="l01121" name="l01121"></a><span class="lineno"> 1121</span><span class="comment"> * request and adjust the Ciphers if necessary</span></div>
<div class="line"><a id="l01122" name="l01122"></a><span class="lineno"> 1122</span><span class="comment"> *</span></div>
<div class="line"><a id="l01123" name="l01123"></a><span class="lineno"> 1123</span><span class="comment"> * Set up by SSL_set_session_secret_cb() in tls_server_name_call_back()</span></div>
<div class="line"><a id="l01124" name="l01124"></a><span class="lineno"> 1124</span><span class="comment"> */</span></div>
<div class="line"><a id="l01125" name="l01125"></a><span class="lineno"> 1125</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l01126" name="l01126"></a><span class="lineno"> 1126</span>tls_secret_call_back(SSL *ssl,</div>
<div class="line"><a id="l01127" name="l01127"></a><span class="lineno"> 1127</span>  <span class="keywordtype">void</span> *secret <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a>,</div>
<div class="line"><a id="l01128" name="l01128"></a><span class="lineno"> 1128</span>  <span class="keywordtype">int</span> *secretlen <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a>,</div>
<div class="line"><a id="l01129" name="l01129"></a><span class="lineno"> 1129</span>  STACK_OF(SSL_CIPHER) *peer_ciphers,</div>
<div class="line"><a id="l01130" name="l01130"></a><span class="lineno"> 1130</span>  <span class="keyword">const</span> SSL_CIPHER **cipher <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a>,</div>
<div class="line"><a id="l01131" name="l01131"></a><span class="lineno"> 1131</span>  <span class="keywordtype">void</span> *arg</div>
<div class="line"><a id="l01132" name="l01132"></a><span class="lineno"> 1132</span>) {</div>
<div class="line"><a id="l01133" name="l01133"></a><span class="lineno"> 1133</span>  <span class="keywordtype">int</span>     ii;</div>
<div class="line"><a id="l01134" name="l01134"></a><span class="lineno"> 1134</span>  <span class="keywordtype">int</span>     psk_requested = 0;</div>
<div class="line"><a id="l01135" name="l01135"></a><span class="lineno"> 1135</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = SSL_get_app_data(ssl);</div>
<div class="line"><a id="l01136" name="l01136"></a><span class="lineno"> 1136</span>  <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data = (<a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a>*)arg;</div>
<div class="line"><a id="l01137" name="l01137"></a><span class="lineno"> 1137</span> </div>
<div class="line"><a id="l01138" name="l01138"></a><span class="lineno"> 1138</span>  <span class="keywordflow">if</span> (session &amp;&amp; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ab12d8e6ea4ec3ec2f196bd088d280f81">psk_key</a> &amp;&amp; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">psk_key_len</a>) {</div>
<div class="line"><a id="l01139" name="l01139"></a><span class="lineno"> 1139</span>    <span class="comment">/* Is PSK being requested - if so, we need to change algorithms */</span></div>
<div class="line"><a id="l01140" name="l01140"></a><span class="lineno"> 1140</span>    <span class="keywordflow">for</span> (ii = 0; ii &lt; sk_SSL_CIPHER_num (peer_ciphers); ii++) {</div>
<div class="line"><a id="l01141" name="l01141"></a><span class="lineno"> 1141</span>      <span class="keyword">const</span> SSL_CIPHER *peer_cipher = sk_SSL_CIPHER_value(peer_ciphers, ii);</div>
<div class="line"><a id="l01142" name="l01142"></a><span class="lineno"> 1142</span> </div>
<div class="line"><a id="l01143" name="l01143"></a><span class="lineno"> 1143</span>      <span class="keywordflow">if</span> (strstr (SSL_CIPHER_get_name (peer_cipher), <span class="stringliteral">&quot;PSK&quot;</span>)) {</div>
<div class="line"><a id="l01144" name="l01144"></a><span class="lineno"> 1144</span>        psk_requested = 1;</div>
<div class="line"><a id="l01145" name="l01145"></a><span class="lineno"> 1145</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01146" name="l01146"></a><span class="lineno"> 1146</span>      }</div>
<div class="line"><a id="l01147" name="l01147"></a><span class="lineno"> 1147</span>    }</div>
<div class="line"><a id="l01148" name="l01148"></a><span class="lineno"> 1148</span>  }</div>
<div class="line"><a id="l01149" name="l01149"></a><span class="lineno"> 1149</span>  <span class="keywordflow">if</span> (!psk_requested) {</div>
<div class="line"><a id="l01150" name="l01150"></a><span class="lineno"> 1150</span>    <span class="keywordflow">if</span> (session) {</div>
<div class="line"><a id="l01151" name="l01151"></a><span class="lineno"> 1151</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;   %s: Using PKI ciphers\n&quot;</span>,</div>
<div class="line"><a id="l01152" name="l01152"></a><span class="lineno"> 1152</span>                <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session));</div>
<div class="line"><a id="l01153" name="l01153"></a><span class="lineno"> 1153</span>    }</div>
<div class="line"><a id="l01154" name="l01154"></a><span class="lineno"> 1154</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01155" name="l01155"></a><span class="lineno"> 1155</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;Using PKI ciphers\n&quot;</span>);</div>
<div class="line"><a id="l01156" name="l01156"></a><span class="lineno"> 1156</span>    }</div>
<div class="line"><a id="l01157" name="l01157"></a><span class="lineno"> 1157</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#aac00e49483212c37c25435f03a6a6cb6">verify_peer_cert</a>) {</div>
<div class="line"><a id="l01158" name="l01158"></a><span class="lineno"> 1158</span>      <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a1e82f78f5b4b930eb2cee687adbcb455">require_peer_cert</a>) {</div>
<div class="line"><a id="l01159" name="l01159"></a><span class="lineno"> 1159</span>        SSL_set_verify(ssl,</div>
<div class="line"><a id="l01160" name="l01160"></a><span class="lineno"> 1160</span>                       SSL_VERIFY_PEER |</div>
<div class="line"><a id="l01161" name="l01161"></a><span class="lineno"> 1161</span>                       SSL_VERIFY_CLIENT_ONCE |</div>
<div class="line"><a id="l01162" name="l01162"></a><span class="lineno"> 1162</span>                       SSL_VERIFY_FAIL_IF_NO_PEER_CERT,</div>
<div class="line"><a id="l01163" name="l01163"></a><span class="lineno"> 1163</span>                       tls_verify_call_back);</div>
<div class="line"><a id="l01164" name="l01164"></a><span class="lineno"> 1164</span>      }</div>
<div class="line"><a id="l01165" name="l01165"></a><span class="lineno"> 1165</span>      <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01166" name="l01166"></a><span class="lineno"> 1166</span>        SSL_set_verify(ssl,</div>
<div class="line"><a id="l01167" name="l01167"></a><span class="lineno"> 1167</span>                       SSL_VERIFY_PEER |</div>
<div class="line"><a id="l01168" name="l01168"></a><span class="lineno"> 1168</span>                       SSL_VERIFY_CLIENT_ONCE,</div>
<div class="line"><a id="l01169" name="l01169"></a><span class="lineno"> 1169</span>                       tls_verify_call_back);</div>
<div class="line"><a id="l01170" name="l01170"></a><span class="lineno"> 1170</span>      }</div>
<div class="line"><a id="l01171" name="l01171"></a><span class="lineno"> 1171</span>    }</div>
<div class="line"><a id="l01172" name="l01172"></a><span class="lineno"> 1172</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01173" name="l01173"></a><span class="lineno"> 1173</span>      SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);</div>
<div class="line"><a id="l01174" name="l01174"></a><span class="lineno"> 1174</span>    }</div>
<div class="line"><a id="l01175" name="l01175"></a><span class="lineno"> 1175</span> </div>
<div class="line"><a id="l01176" name="l01176"></a><span class="lineno"> 1176</span>    <span class="comment">/* Check CA Chain */</span></div>
<div class="line"><a id="l01177" name="l01177"></a><span class="lineno"> 1177</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a3f0ebaa3461576eee13f74ea5a362247">cert_chain_validation</a>)</div>
<div class="line"><a id="l01178" name="l01178"></a><span class="lineno"> 1178</span>      SSL_set_verify_depth(ssl, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a85209ca6aa358e45b4b065b0c39dd360">cert_chain_verify_depth</a>);</div>
<div class="line"><a id="l01179" name="l01179"></a><span class="lineno"> 1179</span> </div>
<div class="line"><a id="l01180" name="l01180"></a><span class="lineno"> 1180</span>    <span class="comment">/* Certificate Revocation */</span></div>
<div class="line"><a id="l01181" name="l01181"></a><span class="lineno"> 1181</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a6651ec064838213f18f49c6044cc7b4f">check_cert_revocation</a>) {</div>
<div class="line"><a id="l01182" name="l01182"></a><span class="lineno"> 1182</span>       X509_VERIFY_PARAM *param;</div>
<div class="line"><a id="l01183" name="l01183"></a><span class="lineno"> 1183</span> </div>
<div class="line"><a id="l01184" name="l01184"></a><span class="lineno"> 1184</span>       param = X509_VERIFY_PARAM_new();</div>
<div class="line"><a id="l01185" name="l01185"></a><span class="lineno"> 1185</span>       X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK);</div>
<div class="line"><a id="l01186" name="l01186"></a><span class="lineno"> 1186</span>       SSL_set1_param(ssl, param);</div>
<div class="line"><a id="l01187" name="l01187"></a><span class="lineno"> 1187</span>       X509_VERIFY_PARAM_free(param);</div>
<div class="line"><a id="l01188" name="l01188"></a><span class="lineno"> 1188</span>    }</div>
<div class="line"><a id="l01189" name="l01189"></a><span class="lineno"> 1189</span>  }</div>
<div class="line"><a id="l01190" name="l01190"></a><span class="lineno"> 1190</span>  <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01191" name="l01191"></a><span class="lineno"> 1191</span>    <span class="keywordflow">if</span> (session) {</div>
<div class="line"><a id="l01192" name="l01192"></a><span class="lineno"> 1192</span>      <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ab12d8e6ea4ec3ec2f196bd088d280f81">psk_key</a> &amp;&amp; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">psk_key_len</a>) {</div>
<div class="line"><a id="l01193" name="l01193"></a><span class="lineno"> 1193</span>        memcpy(secret, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ab12d8e6ea4ec3ec2f196bd088d280f81">psk_key</a>, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">psk_key_len</a>);</div>
<div class="line"><a id="l01194" name="l01194"></a><span class="lineno"> 1194</span>        *secretlen = session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">psk_key_len</a>;</div>
<div class="line"><a id="l01195" name="l01195"></a><span class="lineno"> 1195</span>      }</div>
<div class="line"><a id="l01196" name="l01196"></a><span class="lineno"> 1196</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;   %s: Setting PSK ciphers\n&quot;</span>,</div>
<div class="line"><a id="l01197" name="l01197"></a><span class="lineno"> 1197</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session));</div>
<div class="line"><a id="l01198" name="l01198"></a><span class="lineno"> 1198</span>    }</div>
<div class="line"><a id="l01199" name="l01199"></a><span class="lineno"> 1199</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01200" name="l01200"></a><span class="lineno"> 1200</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;Setting PSK ciphers\n&quot;</span>);</div>
<div class="line"><a id="l01201" name="l01201"></a><span class="lineno"> 1201</span>    }</div>
<div class="line"><a id="l01202" name="l01202"></a><span class="lineno"> 1202</span>    <span class="comment">/*</span></div>
<div class="line"><a id="l01203" name="l01203"></a><span class="lineno"> 1203</span><span class="comment">     * Force a PSK algorithm to be used, so we do PSK</span></div>
<div class="line"><a id="l01204" name="l01204"></a><span class="lineno"> 1204</span><span class="comment">     */</span></div>
<div class="line"><a id="l01205" name="l01205"></a><span class="lineno"> 1205</span>    SSL_set_cipher_list (ssl, <span class="stringliteral">&quot;PSK:!NULL&quot;</span>);</div>
<div class="line"><a id="l01206" name="l01206"></a><span class="lineno"> 1206</span>    SSL_set_psk_server_callback(ssl, coap_dtls_psk_server_callback);</div>
<div class="line"><a id="l01207" name="l01207"></a><span class="lineno"> 1207</span>  }</div>
<div class="line"><a id="l01208" name="l01208"></a><span class="lineno"> 1208</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>) {</div>
<div class="line"><a id="l01209" name="l01209"></a><span class="lineno"> 1209</span>    <span class="comment">/* Additional application setup wanted */</span></div>
<div class="line"><a id="l01210" name="l01210"></a><span class="lineno"> 1210</span>    <span class="keywordflow">if</span> (!setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>(ssl, setup_data))</div>
<div class="line"><a id="l01211" name="l01211"></a><span class="lineno"> 1211</span>     <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01212" name="l01212"></a><span class="lineno"> 1212</span>  }</div>
<div class="line"><a id="l01213" name="l01213"></a><span class="lineno"> 1213</span>  <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01214" name="l01214"></a><span class="lineno"> 1214</span>}</div>
<div class="line"><a id="l01215" name="l01215"></a><span class="lineno"> 1215</span> </div>
<div class="line"><a id="l01216" name="l01216"></a><span class="lineno"> 1216</span><span class="comment">/*</span></div>
<div class="line"><a id="l01217" name="l01217"></a><span class="lineno"> 1217</span><span class="comment"> * During the SSL/TLS initial negotiations, tls_server_name_call_back() is called</span></div>
<div class="line"><a id="l01218" name="l01218"></a><span class="lineno"> 1218</span><span class="comment"> * so it is possible to set up an extra callback to determine whether this is</span></div>
<div class="line"><a id="l01219" name="l01219"></a><span class="lineno"> 1219</span><span class="comment"> * a PKI or PSK incoming request and adjust the Ciphers if necessary</span></div>
<div class="line"><a id="l01220" name="l01220"></a><span class="lineno"> 1220</span><span class="comment"> *</span></div>
<div class="line"><a id="l01221" name="l01221"></a><span class="lineno"> 1221</span><span class="comment"> * Set up by SSL_CTX_set_tlsext_servername_callback() in coap_dtls_context_set_pki()</span></div>
<div class="line"><a id="l01222" name="l01222"></a><span class="lineno"> 1222</span><span class="comment"> */</span></div>
<div class="line"><a id="l01223" name="l01223"></a><span class="lineno"> 1223</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l01224" name="l01224"></a><span class="lineno"> 1224</span>tls_server_name_call_back(SSL *ssl,</div>
<div class="line"><a id="l01225" name="l01225"></a><span class="lineno"> 1225</span>                          <span class="keywordtype">int</span> *sd <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a>,</div>
<div class="line"><a id="l01226" name="l01226"></a><span class="lineno"> 1226</span>                          <span class="keywordtype">void</span> *arg</div>
<div class="line"><a id="l01227" name="l01227"></a><span class="lineno"> 1227</span>) {</div>
<div class="line"><a id="l01228" name="l01228"></a><span class="lineno"> 1228</span>  <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data = (<a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a>*)arg;</div>
<div class="line"><a id="l01229" name="l01229"></a><span class="lineno"> 1229</span> </div>
<div class="line"><a id="l01230" name="l01230"></a><span class="lineno"> 1230</span>  <span class="keywordflow">if</span> (!ssl) {</div>
<div class="line"><a id="l01231" name="l01231"></a><span class="lineno"> 1231</span>    <span class="keywordflow">return</span> SSL_TLSEXT_ERR_NOACK;</div>
<div class="line"><a id="l01232" name="l01232"></a><span class="lineno"> 1232</span>  }</div>
<div class="line"><a id="l01233" name="l01233"></a><span class="lineno"> 1233</span> </div>
<div class="line"><a id="l01234" name="l01234"></a><span class="lineno"> 1234</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ad078b00881086bb7425187f2e7de90ab">validate_sni_call_back</a>) {</div>
<div class="line"><a id="l01235" name="l01235"></a><span class="lineno"> 1235</span>    <span class="comment">/* SNI checking requested */</span></div>
<div class="line"><a id="l01236" name="l01236"></a><span class="lineno"> 1236</span>    <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a>*)SSL_get_app_data(ssl);</div>
<div class="line"><a id="l01237" name="l01237"></a><span class="lineno"> 1237</span>    coap_openssl_context_t *context =</div>
<div class="line"><a id="l01238" name="l01238"></a><span class="lineno"> 1238</span>                  ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01239" name="l01239"></a><span class="lineno"> 1239</span>    <span class="keyword">const</span> <span class="keywordtype">char</span> *sni = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);</div>
<div class="line"><a id="l01240" name="l01240"></a><span class="lineno"> 1240</span>    <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a id="l01241" name="l01241"></a><span class="lineno"> 1241</span> </div>
<div class="line"><a id="l01242" name="l01242"></a><span class="lineno"> 1242</span>    <span class="keywordflow">if</span> (!sni || !sni[0]) {</div>
<div class="line"><a id="l01243" name="l01243"></a><span class="lineno"> 1243</span>      sni = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l01244" name="l01244"></a><span class="lineno"> 1244</span>    }</div>
<div class="line"><a id="l01245" name="l01245"></a><span class="lineno"> 1245</span>    <span class="keywordflow">for</span> (i = 0; i &lt; context-&gt;sni_count; i++) {</div>
<div class="line"><a id="l01246" name="l01246"></a><span class="lineno"> 1246</span>      <span class="keywordflow">if</span> (!strcmp(sni, context-&gt;sni_entry_list[i].sni)) {</div>
<div class="line"><a id="l01247" name="l01247"></a><span class="lineno"> 1247</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01248" name="l01248"></a><span class="lineno"> 1248</span>      }</div>
<div class="line"><a id="l01249" name="l01249"></a><span class="lineno"> 1249</span>    }</div>
<div class="line"><a id="l01250" name="l01250"></a><span class="lineno"> 1250</span>    <span class="keywordflow">if</span> (i == context-&gt;sni_count) {</div>
<div class="line"><a id="l01251" name="l01251"></a><span class="lineno"> 1251</span>      SSL_CTX *ctx;</div>
<div class="line"><a id="l01252" name="l01252"></a><span class="lineno"> 1252</span>      <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> sni_setup_data;</div>
<div class="line"><a id="l01253" name="l01253"></a><span class="lineno"> 1253</span>      <a class="code hl_struct" href="structcoap__dtls__key__t.html">coap_dtls_key_t</a> *new_entry = setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ad078b00881086bb7425187f2e7de90ab">validate_sni_call_back</a>(sni,</div>
<div class="line"><a id="l01254" name="l01254"></a><span class="lineno"> 1254</span>                                               setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#add86314537669f49fca148651fbf842e">sni_call_back_arg</a>);</div>
<div class="line"><a id="l01255" name="l01255"></a><span class="lineno"> 1255</span>      <span class="keywordflow">if</span> (!new_entry) {</div>
<div class="line"><a id="l01256" name="l01256"></a><span class="lineno"> 1256</span>        <span class="keywordflow">return</span> SSL_TLSEXT_ERR_ALERT_FATAL;</div>
<div class="line"><a id="l01257" name="l01257"></a><span class="lineno"> 1257</span>      }</div>
<div class="line"><a id="l01258" name="l01258"></a><span class="lineno"> 1258</span>      <span class="comment">/* Need to set up a new SSL_CTX to switch to */</span></div>
<div class="line"><a id="l01259" name="l01259"></a><span class="lineno"> 1259</span>      <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a62089dd9c72836d322ae0ce0d0e7114f">proto</a> == <a class="code hl_define" href="pdu_8h.html#ac10ea7ae66e5e549b47854417311b560">COAP_PROTO_DTLS</a>) {</div>
<div class="line"><a id="l01260" name="l01260"></a><span class="lineno"> 1260</span>        <span class="comment">/* Set up DTLS context */</span></div>
<div class="line"><a id="l01261" name="l01261"></a><span class="lineno"> 1261</span>        ctx = SSL_CTX_new(DTLS_method());</div>
<div class="line"><a id="l01262" name="l01262"></a><span class="lineno"> 1262</span>        <span class="keywordflow">if</span> (!ctx)</div>
<div class="line"><a id="l01263" name="l01263"></a><span class="lineno"> 1263</span>          <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01264" name="l01264"></a><span class="lineno"> 1264</span>        SSL_CTX_set_min_proto_version(ctx, DTLS1_2_VERSION);</div>
<div class="line"><a id="l01265" name="l01265"></a><span class="lineno"> 1265</span>        SSL_CTX_set_app_data(ctx, &amp;context-&gt;dtls);</div>
<div class="line"><a id="l01266" name="l01266"></a><span class="lineno"> 1266</span>        SSL_CTX_set_read_ahead(ctx, 1);</div>
<div class="line"><a id="l01267" name="l01267"></a><span class="lineno"> 1267</span>        SSL_CTX_set_cipher_list(ctx, <span class="stringliteral">&quot;TLSv1.2:TLSv1.0&quot;</span>);</div>
<div class="line"><a id="l01268" name="l01268"></a><span class="lineno"> 1268</span>        SSL_CTX_set_cookie_generate_cb(ctx, coap_dtls_generate_cookie);</div>
<div class="line"><a id="l01269" name="l01269"></a><span class="lineno"> 1269</span>        SSL_CTX_set_cookie_verify_cb(ctx, coap_dtls_verify_cookie);</div>
<div class="line"><a id="l01270" name="l01270"></a><span class="lineno"> 1270</span>        SSL_CTX_set_info_callback(ctx, coap_dtls_info_callback);</div>
<div class="line"><a id="l01271" name="l01271"></a><span class="lineno"> 1271</span>        SSL_CTX_set_options(ctx, SSL_OP_NO_QUERY_MTU);</div>
<div class="line"><a id="l01272" name="l01272"></a><span class="lineno"> 1272</span>      }</div>
<div class="line"><a id="l01273" name="l01273"></a><span class="lineno"> 1273</span>      <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01274" name="l01274"></a><span class="lineno"> 1274</span>        <span class="comment">/* Set up TLS context */</span></div>
<div class="line"><a id="l01275" name="l01275"></a><span class="lineno"> 1275</span>        ctx = SSL_CTX_new(TLS_method());</div>
<div class="line"><a id="l01276" name="l01276"></a><span class="lineno"> 1276</span>        <span class="keywordflow">if</span> (!ctx)</div>
<div class="line"><a id="l01277" name="l01277"></a><span class="lineno"> 1277</span>          <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01278" name="l01278"></a><span class="lineno"> 1278</span>        SSL_CTX_set_app_data(ctx, &amp;context-&gt;tls);</div>
<div class="line"><a id="l01279" name="l01279"></a><span class="lineno"> 1279</span>        SSL_CTX_set_min_proto_version(ctx, TLS1_VERSION);</div>
<div class="line"><a id="l01280" name="l01280"></a><span class="lineno"> 1280</span>        SSL_CTX_set_cipher_list(ctx, <span class="stringliteral">&quot;TLSv1.2:TLSv1.0&quot;</span>);</div>
<div class="line"><a id="l01281" name="l01281"></a><span class="lineno"> 1281</span>        SSL_CTX_set_info_callback(ctx, coap_dtls_info_callback);</div>
<div class="line"><a id="l01282" name="l01282"></a><span class="lineno"> 1282</span>        SSL_CTX_set_alpn_select_cb(ctx, server_alpn_callback, NULL);</div>
<div class="line"><a id="l01283" name="l01283"></a><span class="lineno"> 1283</span>      }</div>
<div class="line"><a id="l01284" name="l01284"></a><span class="lineno"> 1284</span>      memset(&amp;sni_setup_data, 0, <span class="keyword">sizeof</span>(sni_setup_data));</div>
<div class="line"><a id="l01285" name="l01285"></a><span class="lineno"> 1285</span>      sni_setup_data.<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a> = new_entry-&gt;<a class="code hl_variable" href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">key_type</a>;</div>
<div class="line"><a id="l01286" name="l01286"></a><span class="lineno"> 1286</span>      sni_setup_data.<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a> = new_entry-&gt;<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">pem</a>;</div>
<div class="line"><a id="l01287" name="l01287"></a><span class="lineno"> 1287</span>      sni_setup_data.<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a> = new_entry-&gt;<a class="code hl_variable" href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">key</a>.<a class="code hl_variable" href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">asn1</a>;</div>
<div class="line"><a id="l01288" name="l01288"></a><span class="lineno"> 1288</span>      setup_pki_server(ctx, &amp;sni_setup_data);</div>
<div class="line"><a id="l01289" name="l01289"></a><span class="lineno"> 1289</span> </div>
<div class="line"><a id="l01290" name="l01290"></a><span class="lineno"> 1290</span>      context-&gt;sni_entry_list = OPENSSL_realloc(context-&gt;sni_entry_list,</div>
<div class="line"><a id="l01291" name="l01291"></a><span class="lineno"> 1291</span>                                     (context-&gt;sni_count+1)*<span class="keyword">sizeof</span>(sni_entry));</div>
<div class="line"><a id="l01292" name="l01292"></a><span class="lineno"> 1292</span>      context-&gt;sni_entry_list[context-&gt;sni_count].sni = OPENSSL_strdup(sni);</div>
<div class="line"><a id="l01293" name="l01293"></a><span class="lineno"> 1293</span>      context-&gt;sni_entry_list[context-&gt;sni_count].ctx = ctx;</div>
<div class="line"><a id="l01294" name="l01294"></a><span class="lineno"> 1294</span>      context-&gt;sni_count++;</div>
<div class="line"><a id="l01295" name="l01295"></a><span class="lineno"> 1295</span>    }</div>
<div class="line"><a id="l01296" name="l01296"></a><span class="lineno"> 1296</span>    SSL_set_SSL_CTX (ssl, context-&gt;sni_entry_list[i].ctx);</div>
<div class="line"><a id="l01297" name="l01297"></a><span class="lineno"> 1297</span>    SSL_clear_options (ssl, 0xFFFFFFFFL);</div>
<div class="line"><a id="l01298" name="l01298"></a><span class="lineno"> 1298</span>    SSL_set_options (ssl, SSL_CTX_get_options (context-&gt;sni_entry_list[i].ctx));</div>
<div class="line"><a id="l01299" name="l01299"></a><span class="lineno"> 1299</span>  }</div>
<div class="line"><a id="l01300" name="l01300"></a><span class="lineno"> 1300</span> </div>
<div class="line"><a id="l01301" name="l01301"></a><span class="lineno"> 1301</span>  <span class="comment">/*</span></div>
<div class="line"><a id="l01302" name="l01302"></a><span class="lineno"> 1302</span><span class="comment">   * Have to do extra call back next to get client algorithms</span></div>
<div class="line"><a id="l01303" name="l01303"></a><span class="lineno"> 1303</span><span class="comment">   * SSL_get_client_ciphers() does not work this early on</span></div>
<div class="line"><a id="l01304" name="l01304"></a><span class="lineno"> 1304</span><span class="comment">   */</span></div>
<div class="line"><a id="l01305" name="l01305"></a><span class="lineno"> 1305</span>  SSL_set_session_secret_cb(ssl, tls_secret_call_back, arg);</div>
<div class="line"><a id="l01306" name="l01306"></a><span class="lineno"> 1306</span>  <span class="keywordflow">return</span> SSL_TLSEXT_ERR_OK;</div>
<div class="line"><a id="l01307" name="l01307"></a><span class="lineno"> 1307</span> </div>
<div class="line"><a id="l01308" name="l01308"></a><span class="lineno"> 1308</span>error:</div>
<div class="line"><a id="l01309" name="l01309"></a><span class="lineno"> 1309</span>  <span class="keywordflow">return</span> SSL_TLSEXT_ERR_ALERT_WARNING;</div>
<div class="line"><a id="l01310" name="l01310"></a><span class="lineno"> 1310</span>}</div>
<div class="line"><a id="l01311" name="l01311"></a><span class="lineno"> 1311</span><span class="preprocessor">#else </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01312" name="l01312"></a><span class="lineno"> 1312</span><span class="comment">/*</span></div>
<div class="line"><a id="l01313" name="l01313"></a><span class="lineno"> 1313</span><span class="comment"> * During the SSL/TLS initial negotiations, tls_client_hello_call_back() is</span></div>
<div class="line"><a id="l01314" name="l01314"></a><span class="lineno"> 1314</span><span class="comment"> * called early in the Client Hello processing so it is possible to determine</span></div>
<div class="line"><a id="l01315" name="l01315"></a><span class="lineno"> 1315</span><span class="comment"> * whether this is a PKI or PSK incoming request and adjust the Ciphers if</span></div>
<div class="line"><a id="l01316" name="l01316"></a><span class="lineno"> 1316</span><span class="comment"> * necessary.</span></div>
<div class="line"><a id="l01317" name="l01317"></a><span class="lineno"> 1317</span><span class="comment"> *</span></div>
<div class="line"><a id="l01318" name="l01318"></a><span class="lineno"> 1318</span><span class="comment"> * Set up by SSL_CTX_set_client_hello_cb().</span></div>
<div class="line"><a id="l01319" name="l01319"></a><span class="lineno"> 1319</span><span class="comment"> */</span></div>
<div class="line"><a id="l01320" name="l01320"></a><span class="lineno"> 1320</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l01321" name="l01321"></a><span class="lineno"> 1321</span>tls_client_hello_call_back(SSL *ssl,</div>
<div class="line"><a id="l01322" name="l01322"></a><span class="lineno"> 1322</span>                          <span class="keywordtype">int</span> *al,</div>
<div class="line"><a id="l01323" name="l01323"></a><span class="lineno"> 1323</span>                          <span class="keywordtype">void</span> *arg <a class="code hl_define" href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a></div>
<div class="line"><a id="l01324" name="l01324"></a><span class="lineno"> 1324</span>) {</div>
<div class="line"><a id="l01325" name="l01325"></a><span class="lineno"> 1325</span>  <a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session = (<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *)SSL_get_app_data(ssl);</div>
<div class="line"><a id="l01326" name="l01326"></a><span class="lineno"> 1326</span>  coap_openssl_context_t *dtls_context = (coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>;</div>
<div class="line"><a id="l01327" name="l01327"></a><span class="lineno"> 1327</span>  <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data = &amp;dtls_context-&gt;setup_data;</div>
<div class="line"><a id="l01328" name="l01328"></a><span class="lineno"> 1328</span>  <span class="keywordtype">int</span> psk_requested = 0;</div>
<div class="line"><a id="l01329" name="l01329"></a><span class="lineno"> 1329</span>  <span class="keyword">const</span> <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> *out;</div>
<div class="line"><a id="l01330" name="l01330"></a><span class="lineno"> 1330</span>  <span class="keywordtype">size_t</span> outlen;</div>
<div class="line"><a id="l01331" name="l01331"></a><span class="lineno"> 1331</span> </div>
<div class="line"><a id="l01332" name="l01332"></a><span class="lineno"> 1332</span>  <span class="keywordflow">if</span> (!ssl) {</div>
<div class="line"><a id="l01333" name="l01333"></a><span class="lineno"> 1333</span>    *al = SSL_AD_INTERNAL_ERROR;</div>
<div class="line"><a id="l01334" name="l01334"></a><span class="lineno"> 1334</span>    <span class="keywordflow">return</span> SSL_CLIENT_HELLO_ERROR;</div>
<div class="line"><a id="l01335" name="l01335"></a><span class="lineno"> 1335</span>  }</div>
<div class="line"><a id="l01336" name="l01336"></a><span class="lineno"> 1336</span> </div>
<div class="line"><a id="l01337" name="l01337"></a><span class="lineno"> 1337</span>  <span class="comment">/*</span></div>
<div class="line"><a id="l01338" name="l01338"></a><span class="lineno"> 1338</span><span class="comment">   * See if PSK being requested</span></div>
<div class="line"><a id="l01339" name="l01339"></a><span class="lineno"> 1339</span><span class="comment">   */</span></div>
<div class="line"><a id="l01340" name="l01340"></a><span class="lineno"> 1340</span>  <span class="keywordflow">if</span> (session &amp;&amp; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#ab12d8e6ea4ec3ec2f196bd088d280f81">psk_key</a> &amp;&amp; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">psk_key_len</a>) {</div>
<div class="line"><a id="l01341" name="l01341"></a><span class="lineno"> 1341</span>    <span class="keywordtype">int</span> len = SSL_client_hello_get0_ciphers(ssl, &amp;out);</div>
<div class="line"><a id="l01342" name="l01342"></a><span class="lineno"> 1342</span>    STACK_OF(SSL_CIPHER) *peer_ciphers = NULL;</div>
<div class="line"><a id="l01343" name="l01343"></a><span class="lineno"> 1343</span>    STACK_OF(SSL_CIPHER) *scsvc = NULL;</div>
<div class="line"><a id="l01344" name="l01344"></a><span class="lineno"> 1344</span> </div>
<div class="line"><a id="l01345" name="l01345"></a><span class="lineno"> 1345</span>    <span class="keywordflow">if</span> (len &amp;&amp; SSL_bytes_to_cipher_list(ssl, out, len,</div>
<div class="line"><a id="l01346" name="l01346"></a><span class="lineno"> 1346</span>                                        SSL_client_hello_isv2(ssl),</div>
<div class="line"><a id="l01347" name="l01347"></a><span class="lineno"> 1347</span>                                        &amp;peer_ciphers, &amp;scsvc)) {</div>
<div class="line"><a id="l01348" name="l01348"></a><span class="lineno"> 1348</span>      <span class="keywordtype">int</span> ii;</div>
<div class="line"><a id="l01349" name="l01349"></a><span class="lineno"> 1349</span>      <span class="keywordflow">for</span> (ii = 0; ii &lt; sk_SSL_CIPHER_num (peer_ciphers); ii++) {</div>
<div class="line"><a id="l01350" name="l01350"></a><span class="lineno"> 1350</span>        <span class="keyword">const</span> SSL_CIPHER *peer_cipher = sk_SSL_CIPHER_value(peer_ciphers, ii);</div>
<div class="line"><a id="l01351" name="l01351"></a><span class="lineno"> 1351</span> </div>
<div class="line"><a id="l01352" name="l01352"></a><span class="lineno"> 1352</span>        <span class="keywordflow">if</span> (strstr (SSL_CIPHER_get_name (peer_cipher), <span class="stringliteral">&quot;PSK&quot;</span>)) {</div>
<div class="line"><a id="l01353" name="l01353"></a><span class="lineno"> 1353</span>          psk_requested = 1;</div>
<div class="line"><a id="l01354" name="l01354"></a><span class="lineno"> 1354</span>          <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01355" name="l01355"></a><span class="lineno"> 1355</span>        }</div>
<div class="line"><a id="l01356" name="l01356"></a><span class="lineno"> 1356</span>      }</div>
<div class="line"><a id="l01357" name="l01357"></a><span class="lineno"> 1357</span>    }</div>
<div class="line"><a id="l01358" name="l01358"></a><span class="lineno"> 1358</span>    sk_SSL_CIPHER_free(peer_ciphers);</div>
<div class="line"><a id="l01359" name="l01359"></a><span class="lineno"> 1359</span>    sk_SSL_CIPHER_free(scsvc);</div>
<div class="line"><a id="l01360" name="l01360"></a><span class="lineno"> 1360</span>  }</div>
<div class="line"><a id="l01361" name="l01361"></a><span class="lineno"> 1361</span> </div>
<div class="line"><a id="l01362" name="l01362"></a><span class="lineno"> 1362</span>  <span class="keywordflow">if</span> (psk_requested) {</div>
<div class="line"><a id="l01363" name="l01363"></a><span class="lineno"> 1363</span>    <span class="comment">/*</span></div>
<div class="line"><a id="l01364" name="l01364"></a><span class="lineno"> 1364</span><span class="comment">     * Client has requested PSK and it is supported</span></div>
<div class="line"><a id="l01365" name="l01365"></a><span class="lineno"> 1365</span><span class="comment">     */</span></div>
<div class="line"><a id="l01366" name="l01366"></a><span class="lineno"> 1366</span>    <span class="keywordflow">if</span> (session) {</div>
<div class="line"><a id="l01367" name="l01367"></a><span class="lineno"> 1367</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;   %s: PSK request\n&quot;</span>,</div>
<div class="line"><a id="l01368" name="l01368"></a><span class="lineno"> 1368</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session));</div>
<div class="line"><a id="l01369" name="l01369"></a><span class="lineno"> 1369</span>    }</div>
<div class="line"><a id="l01370" name="l01370"></a><span class="lineno"> 1370</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01371" name="l01371"></a><span class="lineno"> 1371</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;PSK request\n&quot;</span>);</div>
<div class="line"><a id="l01372" name="l01372"></a><span class="lineno"> 1372</span>    }</div>
<div class="line"><a id="l01373" name="l01373"></a><span class="lineno"> 1373</span>    SSL_set_psk_server_callback(ssl, coap_dtls_psk_server_callback);</div>
<div class="line"><a id="l01374" name="l01374"></a><span class="lineno"> 1374</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>) {</div>
<div class="line"><a id="l01375" name="l01375"></a><span class="lineno"> 1375</span>      <span class="comment">/* Additional application setup wanted */</span></div>
<div class="line"><a id="l01376" name="l01376"></a><span class="lineno"> 1376</span>      <span class="keywordflow">if</span> (!setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>(ssl, setup_data))</div>
<div class="line"><a id="l01377" name="l01377"></a><span class="lineno"> 1377</span>       <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01378" name="l01378"></a><span class="lineno"> 1378</span>    }</div>
<div class="line"><a id="l01379" name="l01379"></a><span class="lineno"> 1379</span>    <span class="keywordflow">return</span> SSL_CLIENT_HELLO_SUCCESS;</div>
<div class="line"><a id="l01380" name="l01380"></a><span class="lineno"> 1380</span>  }</div>
<div class="line"><a id="l01381" name="l01381"></a><span class="lineno"> 1381</span> </div>
<div class="line"><a id="l01382" name="l01382"></a><span class="lineno"> 1382</span>  <span class="comment">/*</span></div>
<div class="line"><a id="l01383" name="l01383"></a><span class="lineno"> 1383</span><span class="comment">   * Handle Certificate requests</span></div>
<div class="line"><a id="l01384" name="l01384"></a><span class="lineno"> 1384</span><span class="comment">   */</span></div>
<div class="line"><a id="l01385" name="l01385"></a><span class="lineno"> 1385</span> </div>
<div class="line"><a id="l01386" name="l01386"></a><span class="lineno"> 1386</span>  <span class="comment">/*</span></div>
<div class="line"><a id="l01387" name="l01387"></a><span class="lineno"> 1387</span><span class="comment">   * Determine what type of certificate is being requested</span></div>
<div class="line"><a id="l01388" name="l01388"></a><span class="lineno"> 1388</span><span class="comment">   */</span></div>
<div class="line"><a id="l01389" name="l01389"></a><span class="lineno"> 1389</span>  <span class="keywordflow">if</span> (SSL_client_hello_get0_ext(ssl, TLSEXT_TYPE_client_certificate_type,</div>
<div class="line"><a id="l01390" name="l01390"></a><span class="lineno"> 1390</span>                                &amp;out, &amp;outlen)) {</div>
<div class="line"><a id="l01391" name="l01391"></a><span class="lineno"> 1391</span>    <span class="keywordtype">size_t</span> ii;</div>
<div class="line"><a id="l01392" name="l01392"></a><span class="lineno"> 1392</span>    <span class="keywordflow">for</span> (ii = 0; ii &lt; outlen; ii++) {</div>
<div class="line"><a id="l01393" name="l01393"></a><span class="lineno"> 1393</span>      <span class="keywordflow">switch</span> (out[ii]) {</div>
<div class="line"><a id="l01394" name="l01394"></a><span class="lineno"> 1394</span>      <span class="keywordflow">case</span> 0:</div>
<div class="line"><a id="l01395" name="l01395"></a><span class="lineno"> 1395</span>        <span class="comment">/* RFC6091 X.509 */</span></div>
<div class="line"><a id="l01396" name="l01396"></a><span class="lineno"> 1396</span>        <span class="keywordflow">if</span> (outlen &gt;= 2) {</div>
<div class="line"><a id="l01397" name="l01397"></a><span class="lineno"> 1397</span>          <span class="comment">/* X.509 cannot be the singular entry. RFC6091 3.1. Client Hello */</span></div>
<div class="line"><a id="l01398" name="l01398"></a><span class="lineno"> 1398</span>          <span class="keywordflow">goto</span> is_x509;</div>
<div class="line"><a id="l01399" name="l01399"></a><span class="lineno"> 1399</span>        }</div>
<div class="line"><a id="l01400" name="l01400"></a><span class="lineno"> 1400</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01401" name="l01401"></a><span class="lineno"> 1401</span>      <span class="keywordflow">case</span> 2:</div>
<div class="line"><a id="l01402" name="l01402"></a><span class="lineno"> 1402</span>        <span class="comment">/* RFC7250 RPK - not yet supported */</span></div>
<div class="line"><a id="l01403" name="l01403"></a><span class="lineno"> 1403</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01404" name="l01404"></a><span class="lineno"> 1404</span>      <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l01405" name="l01405"></a><span class="lineno"> 1405</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01406" name="l01406"></a><span class="lineno"> 1406</span>      }</div>
<div class="line"><a id="l01407" name="l01407"></a><span class="lineno"> 1407</span>    }</div>
<div class="line"><a id="l01408" name="l01408"></a><span class="lineno"> 1408</span>    *al = SSL_AD_UNSUPPORTED_EXTENSION;</div>
<div class="line"><a id="l01409" name="l01409"></a><span class="lineno"> 1409</span>    <span class="keywordflow">return</span> SSL_CLIENT_HELLO_ERROR;</div>
<div class="line"><a id="l01410" name="l01410"></a><span class="lineno"> 1410</span>  }</div>
<div class="line"><a id="l01411" name="l01411"></a><span class="lineno"> 1411</span> </div>
<div class="line"><a id="l01412" name="l01412"></a><span class="lineno"> 1412</span>is_x509:</div>
<div class="line"><a id="l01413" name="l01413"></a><span class="lineno"> 1413</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ad078b00881086bb7425187f2e7de90ab">validate_sni_call_back</a>) {</div>
<div class="line"><a id="l01414" name="l01414"></a><span class="lineno"> 1414</span>    <span class="comment">/*</span></div>
<div class="line"><a id="l01415" name="l01415"></a><span class="lineno"> 1415</span><span class="comment">     * SNI checking requested</span></div>
<div class="line"><a id="l01416" name="l01416"></a><span class="lineno"> 1416</span><span class="comment">     */</span></div>
<div class="line"><a id="l01417" name="l01417"></a><span class="lineno"> 1417</span>    <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> sni_setup_data;</div>
<div class="line"><a id="l01418" name="l01418"></a><span class="lineno"> 1418</span>    coap_openssl_context_t *context =</div>
<div class="line"><a id="l01419" name="l01419"></a><span class="lineno"> 1419</span>                  ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01420" name="l01420"></a><span class="lineno"> 1420</span>    <span class="keyword">const</span> <span class="keywordtype">char</span> *sni = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l01421" name="l01421"></a><span class="lineno"> 1421</span>    <span class="keywordtype">char</span> *sni_tmp = NULL;</div>
<div class="line"><a id="l01422" name="l01422"></a><span class="lineno"> 1422</span>    <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a id="l01423" name="l01423"></a><span class="lineno"> 1423</span> </div>
<div class="line"><a id="l01424" name="l01424"></a><span class="lineno"> 1424</span>    <span class="keywordflow">if</span> (SSL_client_hello_get0_ext (ssl, TLSEXT_TYPE_server_name, &amp;out, &amp;outlen) &amp;&amp;</div>
<div class="line"><a id="l01425" name="l01425"></a><span class="lineno"> 1425</span>        outlen &gt; 5 &amp;&amp;</div>
<div class="line"><a id="l01426" name="l01426"></a><span class="lineno"> 1426</span>        (((out[0]&lt;&lt;8) + out[1] +2) == (int)outlen) &amp;&amp;</div>
<div class="line"><a id="l01427" name="l01427"></a><span class="lineno"> 1427</span>        out[2] == TLSEXT_NAMETYPE_host_name &amp;&amp;</div>
<div class="line"><a id="l01428" name="l01428"></a><span class="lineno"> 1428</span>        (((out[3]&lt;&lt;8) + out[4] +2 +3) == (int)outlen)) {</div>
<div class="line"><a id="l01429" name="l01429"></a><span class="lineno"> 1429</span>      <span class="comment">/* Skip over length, type and length */</span></div>
<div class="line"><a id="l01430" name="l01430"></a><span class="lineno"> 1430</span>      out += 5;</div>
<div class="line"><a id="l01431" name="l01431"></a><span class="lineno"> 1431</span>      outlen -= 5;</div>
<div class="line"><a id="l01432" name="l01432"></a><span class="lineno"> 1432</span>      sni_tmp = OPENSSL_malloc(outlen+1);</div>
<div class="line"><a id="l01433" name="l01433"></a><span class="lineno"> 1433</span>      sni_tmp[outlen] = <span class="charliteral">&#39;\000&#39;</span>;</div>
<div class="line"><a id="l01434" name="l01434"></a><span class="lineno"> 1434</span>      memcpy(sni_tmp, out, outlen);</div>
<div class="line"><a id="l01435" name="l01435"></a><span class="lineno"> 1435</span>      sni = sni_tmp;</div>
<div class="line"><a id="l01436" name="l01436"></a><span class="lineno"> 1436</span>    }</div>
<div class="line"><a id="l01437" name="l01437"></a><span class="lineno"> 1437</span>    <span class="comment">/* Is this a cached entry? */</span></div>
<div class="line"><a id="l01438" name="l01438"></a><span class="lineno"> 1438</span>    <span class="keywordflow">for</span> (i = 0; i &lt; context-&gt;sni_count; i++) {</div>
<div class="line"><a id="l01439" name="l01439"></a><span class="lineno"> 1439</span>      <span class="keywordflow">if</span> (!strcmp(sni, context-&gt;sni_entry_list[i].sni)) {</div>
<div class="line"><a id="l01440" name="l01440"></a><span class="lineno"> 1440</span>        <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01441" name="l01441"></a><span class="lineno"> 1441</span>      }</div>
<div class="line"><a id="l01442" name="l01442"></a><span class="lineno"> 1442</span>    }</div>
<div class="line"><a id="l01443" name="l01443"></a><span class="lineno"> 1443</span>    <span class="keywordflow">if</span> (i == context-&gt;sni_count) {</div>
<div class="line"><a id="l01444" name="l01444"></a><span class="lineno"> 1444</span>      <span class="comment">/*</span></div>
<div class="line"><a id="l01445" name="l01445"></a><span class="lineno"> 1445</span><span class="comment">       * New SNI request</span></div>
<div class="line"><a id="l01446" name="l01446"></a><span class="lineno"> 1446</span><span class="comment">       */</span></div>
<div class="line"><a id="l01447" name="l01447"></a><span class="lineno"> 1447</span>      <a class="code hl_struct" href="structcoap__dtls__key__t.html">coap_dtls_key_t</a> *new_entry = setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#ad078b00881086bb7425187f2e7de90ab">validate_sni_call_back</a>(sni,</div>
<div class="line"><a id="l01448" name="l01448"></a><span class="lineno"> 1448</span>                                               setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#add86314537669f49fca148651fbf842e">sni_call_back_arg</a>);</div>
<div class="line"><a id="l01449" name="l01449"></a><span class="lineno"> 1449</span>      <span class="keywordflow">if</span> (!new_entry) {</div>
<div class="line"><a id="l01450" name="l01450"></a><span class="lineno"> 1450</span>        *al = SSL_AD_UNRECOGNIZED_NAME;</div>
<div class="line"><a id="l01451" name="l01451"></a><span class="lineno"> 1451</span>        <span class="keywordflow">return</span> SSL_CLIENT_HELLO_ERROR;</div>
<div class="line"><a id="l01452" name="l01452"></a><span class="lineno"> 1452</span>      }</div>
<div class="line"><a id="l01453" name="l01453"></a><span class="lineno"> 1453</span> </div>
<div class="line"><a id="l01454" name="l01454"></a><span class="lineno"> 1454</span> </div>
<div class="line"><a id="l01455" name="l01455"></a><span class="lineno"> 1455</span>      context-&gt;sni_entry_list = OPENSSL_realloc(context-&gt;sni_entry_list,</div>
<div class="line"><a id="l01456" name="l01456"></a><span class="lineno"> 1456</span>                                     (context-&gt;sni_count+1)*<span class="keyword">sizeof</span>(sni_entry));</div>
<div class="line"><a id="l01457" name="l01457"></a><span class="lineno"> 1457</span>      context-&gt;sni_entry_list[context-&gt;sni_count].sni = OPENSSL_strdup(sni);</div>
<div class="line"><a id="l01458" name="l01458"></a><span class="lineno"> 1458</span>      context-&gt;sni_entry_list[context-&gt;sni_count].pki_key = *new_entry;</div>
<div class="line"><a id="l01459" name="l01459"></a><span class="lineno"> 1459</span>      context-&gt;sni_count++;</div>
<div class="line"><a id="l01460" name="l01460"></a><span class="lineno"> 1460</span>    }</div>
<div class="line"><a id="l01461" name="l01461"></a><span class="lineno"> 1461</span>    <span class="keywordflow">if</span> (sni_tmp) {</div>
<div class="line"><a id="l01462" name="l01462"></a><span class="lineno"> 1462</span>      OPENSSL_free(sni_tmp);</div>
<div class="line"><a id="l01463" name="l01463"></a><span class="lineno"> 1463</span>    }</div>
<div class="line"><a id="l01464" name="l01464"></a><span class="lineno"> 1464</span>    memset(&amp;sni_setup_data, 0, <span class="keyword">sizeof</span>(sni_setup_data));</div>
<div class="line"><a id="l01465" name="l01465"></a><span class="lineno"> 1465</span>    sni_setup_data.<a class="code hl_variable" href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">pki_key</a> = context-&gt;sni_entry_list[i].pki_key;</div>
<div class="line"><a id="l01466" name="l01466"></a><span class="lineno"> 1466</span>    setup_pki_ssl(ssl, &amp;sni_setup_data, 1);</div>
<div class="line"><a id="l01467" name="l01467"></a><span class="lineno"> 1467</span>  }</div>
<div class="line"><a id="l01468" name="l01468"></a><span class="lineno"> 1468</span>  <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01469" name="l01469"></a><span class="lineno"> 1469</span>    setup_pki_ssl(ssl, setup_data, 1);</div>
<div class="line"><a id="l01470" name="l01470"></a><span class="lineno"> 1470</span>  }</div>
<div class="line"><a id="l01471" name="l01471"></a><span class="lineno"> 1471</span> </div>
<div class="line"><a id="l01472" name="l01472"></a><span class="lineno"> 1472</span>  <span class="keywordflow">if</span> (session) {</div>
<div class="line"><a id="l01473" name="l01473"></a><span class="lineno"> 1473</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;   %s: Using PKI ciphers\n&quot;</span>,</div>
<div class="line"><a id="l01474" name="l01474"></a><span class="lineno"> 1474</span>              <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session));</div>
<div class="line"><a id="l01475" name="l01475"></a><span class="lineno"> 1475</span>  }</div>
<div class="line"><a id="l01476" name="l01476"></a><span class="lineno"> 1476</span>  <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01477" name="l01477"></a><span class="lineno"> 1477</span>    <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a>, <span class="stringliteral">&quot;Using PKI ciphers\n&quot;</span>);</div>
<div class="line"><a id="l01478" name="l01478"></a><span class="lineno"> 1478</span>  }</div>
<div class="line"><a id="l01479" name="l01479"></a><span class="lineno"> 1479</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#aac00e49483212c37c25435f03a6a6cb6">verify_peer_cert</a>) {</div>
<div class="line"><a id="l01480" name="l01480"></a><span class="lineno"> 1480</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a1e82f78f5b4b930eb2cee687adbcb455">require_peer_cert</a>) {</div>
<div class="line"><a id="l01481" name="l01481"></a><span class="lineno"> 1481</span>      SSL_set_verify(ssl,</div>
<div class="line"><a id="l01482" name="l01482"></a><span class="lineno"> 1482</span>                     SSL_VERIFY_PEER |</div>
<div class="line"><a id="l01483" name="l01483"></a><span class="lineno"> 1483</span>                     SSL_VERIFY_CLIENT_ONCE |</div>
<div class="line"><a id="l01484" name="l01484"></a><span class="lineno"> 1484</span>                     SSL_VERIFY_FAIL_IF_NO_PEER_CERT,</div>
<div class="line"><a id="l01485" name="l01485"></a><span class="lineno"> 1485</span>                     tls_verify_call_back);</div>
<div class="line"><a id="l01486" name="l01486"></a><span class="lineno"> 1486</span>    }</div>
<div class="line"><a id="l01487" name="l01487"></a><span class="lineno"> 1487</span>    <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01488" name="l01488"></a><span class="lineno"> 1488</span>      SSL_set_verify(ssl,</div>
<div class="line"><a id="l01489" name="l01489"></a><span class="lineno"> 1489</span>                     SSL_VERIFY_PEER |</div>
<div class="line"><a id="l01490" name="l01490"></a><span class="lineno"> 1490</span>                     SSL_VERIFY_CLIENT_ONCE,</div>
<div class="line"><a id="l01491" name="l01491"></a><span class="lineno"> 1491</span>                     tls_verify_call_back);</div>
<div class="line"><a id="l01492" name="l01492"></a><span class="lineno"> 1492</span>    }</div>
<div class="line"><a id="l01493" name="l01493"></a><span class="lineno"> 1493</span>  }</div>
<div class="line"><a id="l01494" name="l01494"></a><span class="lineno"> 1494</span>  <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01495" name="l01495"></a><span class="lineno"> 1495</span>    SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);</div>
<div class="line"><a id="l01496" name="l01496"></a><span class="lineno"> 1496</span>  }</div>
<div class="line"><a id="l01497" name="l01497"></a><span class="lineno"> 1497</span> </div>
<div class="line"><a id="l01498" name="l01498"></a><span class="lineno"> 1498</span>  <span class="comment">/* Check CA Chain */</span></div>
<div class="line"><a id="l01499" name="l01499"></a><span class="lineno"> 1499</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a3f0ebaa3461576eee13f74ea5a362247">cert_chain_validation</a>)</div>
<div class="line"><a id="l01500" name="l01500"></a><span class="lineno"> 1500</span>    SSL_set_verify_depth(ssl, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a85209ca6aa358e45b4b065b0c39dd360">cert_chain_verify_depth</a>);</div>
<div class="line"><a id="l01501" name="l01501"></a><span class="lineno"> 1501</span> </div>
<div class="line"><a id="l01502" name="l01502"></a><span class="lineno"> 1502</span>  <span class="comment">/* Certificate Revocation */</span></div>
<div class="line"><a id="l01503" name="l01503"></a><span class="lineno"> 1503</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a6651ec064838213f18f49c6044cc7b4f">check_cert_revocation</a>) {</div>
<div class="line"><a id="l01504" name="l01504"></a><span class="lineno"> 1504</span>     X509_VERIFY_PARAM *param;</div>
<div class="line"><a id="l01505" name="l01505"></a><span class="lineno"> 1505</span> </div>
<div class="line"><a id="l01506" name="l01506"></a><span class="lineno"> 1506</span>     param = X509_VERIFY_PARAM_new();</div>
<div class="line"><a id="l01507" name="l01507"></a><span class="lineno"> 1507</span>     X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK);</div>
<div class="line"><a id="l01508" name="l01508"></a><span class="lineno"> 1508</span>     SSL_set1_param(ssl, param);</div>
<div class="line"><a id="l01509" name="l01509"></a><span class="lineno"> 1509</span>     X509_VERIFY_PARAM_free(param);</div>
<div class="line"><a id="l01510" name="l01510"></a><span class="lineno"> 1510</span>  }</div>
<div class="line"><a id="l01511" name="l01511"></a><span class="lineno"> 1511</span>  <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>) {</div>
<div class="line"><a id="l01512" name="l01512"></a><span class="lineno"> 1512</span>    <span class="comment">/* Additional application setup wanted */</span></div>
<div class="line"><a id="l01513" name="l01513"></a><span class="lineno"> 1513</span>    <span class="keywordflow">if</span> (!setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">additional_tls_setup_call_back</a>(ssl, setup_data))</div>
<div class="line"><a id="l01514" name="l01514"></a><span class="lineno"> 1514</span>     <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01515" name="l01515"></a><span class="lineno"> 1515</span>  }</div>
<div class="line"><a id="l01516" name="l01516"></a><span class="lineno"> 1516</span>  <span class="keywordflow">return</span> SSL_CLIENT_HELLO_SUCCESS;</div>
<div class="line"><a id="l01517" name="l01517"></a><span class="lineno"> 1517</span>}</div>
<div class="line"><a id="l01518" name="l01518"></a><span class="lineno"> 1518</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01519" name="l01519"></a><span class="lineno"> 1519</span> </div>
<div class="line"><a id="l01520" name="l01520"></a><span class="lineno"> 1520</span><span class="keywordtype">int</span></div>
<div class="line"><a id="l01521" name="l01521"></a><span class="lineno"> 1521</span><a class="code hl_function" href="coap__notls_8c.html#abff27cfd1dfb2359351f58244f929808">coap_dtls_context_set_pki</a>(<a class="code hl_struct" href="structcoap__context__t.html">coap_context_t</a> *ctx,</div>
<div class="line"><a id="l01522" name="l01522"></a><span class="lineno"> 1522</span>                          <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data,</div>
<div class="line"><a id="l01523" name="l01523"></a><span class="lineno"> 1523</span>                          <a class="code hl_enumeration" href="group__dtls__internal.html#ga4dbea8aa6943bcf865990b5cebb6bfa4">coap_dtls_role_t</a> role</div>
<div class="line"><a id="l01524" name="l01524"></a><span class="lineno"> 1524</span>) {</div>
<div class="line"><a id="l01525" name="l01525"></a><span class="lineno"> 1525</span>  coap_openssl_context_t *context =</div>
<div class="line"><a id="l01526" name="l01526"></a><span class="lineno"> 1526</span>                                ((coap_openssl_context_t *)ctx-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01527" name="l01527"></a><span class="lineno"> 1527</span>  BIO *bio;</div>
<div class="line"><a id="l01528" name="l01528"></a><span class="lineno"> 1528</span>  <span class="keywordflow">if</span> (!setup_data)</div>
<div class="line"><a id="l01529" name="l01529"></a><span class="lineno"> 1529</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01530" name="l01530"></a><span class="lineno"> 1530</span>  context-&gt;setup_data = *setup_data;</div>
<div class="line"><a id="l01531" name="l01531"></a><span class="lineno"> 1531</span>  <span class="keywordflow">if</span> (role == <a class="code hl_enumvalue" href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a>) {</div>
<div class="line"><a id="l01532" name="l01532"></a><span class="lineno"> 1532</span>    <span class="keywordflow">if</span> (context-&gt;dtls.ctx) {</div>
<div class="line"><a id="l01533" name="l01533"></a><span class="lineno"> 1533</span>      <span class="comment">/* SERVER DTLS */</span></div>
<div class="line"><a id="l01534" name="l01534"></a><span class="lineno"> 1534</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01535" name="l01535"></a><span class="lineno"> 1535</span>      <span class="keywordflow">if</span> (!setup_pki_server(context-&gt;dtls.ctx, setup_data))</div>
<div class="line"><a id="l01536" name="l01536"></a><span class="lineno"> 1536</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01537" name="l01537"></a><span class="lineno"> 1537</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &lt; 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01538" name="l01538"></a><span class="lineno"> 1538</span>      <span class="comment">/* libcoap is managing TLS connection based on setup_data options */</span></div>
<div class="line"><a id="l01539" name="l01539"></a><span class="lineno"> 1539</span>      <span class="comment">/* Need to set up logic to differentiate between a PSK or PKI session */</span></div>
<div class="line"><a id="l01540" name="l01540"></a><span class="lineno"> 1540</span>      <span class="comment">/*</span></div>
<div class="line"><a id="l01541" name="l01541"></a><span class="lineno"> 1541</span><span class="comment">       * For OpenSSL 1.1.1, we need to use SSL_CTX_set_client_hello_cb()</span></div>
<div class="line"><a id="l01542" name="l01542"></a><span class="lineno"> 1542</span><span class="comment">       * which is not in 1.1.0</span></div>
<div class="line"><a id="l01543" name="l01543"></a><span class="lineno"> 1543</span><span class="comment">       */</span></div>
<div class="line"><a id="l01544" name="l01544"></a><span class="lineno"> 1544</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01545" name="l01545"></a><span class="lineno"> 1545</span>      <span class="keywordflow">if</span> (SSLeay() &gt;= 0x10101000L) {</div>
<div class="line"><a id="l01546" name="l01546"></a><span class="lineno"> 1546</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l01547" name="l01547"></a><span class="lineno"> 1547</span>                 <span class="stringliteral">&quot;OpenSSL compiled with %lux, linked with %lux, so &quot;</span></div>
<div class="line"><a id="l01548" name="l01548"></a><span class="lineno"> 1548</span>                 <span class="stringliteral">&quot;no certificate checking\n&quot;</span>,</div>
<div class="line"><a id="l01549" name="l01549"></a><span class="lineno"> 1549</span>                 OPENSSL_VERSION_NUMBER, SSLeay());</div>
<div class="line"><a id="l01550" name="l01550"></a><span class="lineno"> 1550</span>      }</div>
<div class="line"><a id="l01551" name="l01551"></a><span class="lineno"> 1551</span>      SSL_CTX_set_tlsext_servername_arg(context-&gt;dtls.ctx, &amp;context-&gt;setup_data);</div>
<div class="line"><a id="l01552" name="l01552"></a><span class="lineno"> 1552</span>      SSL_CTX_set_tlsext_servername_callback(context-&gt;dtls.ctx,</div>
<div class="line"><a id="l01553" name="l01553"></a><span class="lineno"> 1553</span>                                             tls_server_name_call_back);</div>
<div class="line"><a id="l01554" name="l01554"></a><span class="lineno"> 1554</span><span class="preprocessor">#else </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01555" name="l01555"></a><span class="lineno"> 1555</span>      SSL_CTX_set_client_hello_cb(context-&gt;dtls.ctx,</div>
<div class="line"><a id="l01556" name="l01556"></a><span class="lineno"> 1556</span>                                    tls_client_hello_call_back,</div>
<div class="line"><a id="l01557" name="l01557"></a><span class="lineno"> 1557</span>                                    NULL);</div>
<div class="line"><a id="l01558" name="l01558"></a><span class="lineno"> 1558</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01559" name="l01559"></a><span class="lineno"> 1559</span>    }</div>
<div class="line"><a id="l01560" name="l01560"></a><span class="lineno"> 1560</span>    <span class="keywordflow">if</span> (context-&gt;tls.ctx) {</div>
<div class="line"><a id="l01561" name="l01561"></a><span class="lineno"> 1561</span>      <span class="comment">/* SERVER TLS */</span></div>
<div class="line"><a id="l01562" name="l01562"></a><span class="lineno"> 1562</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01563" name="l01563"></a><span class="lineno"> 1563</span>      <span class="keywordflow">if</span> (!setup_pki_server(context-&gt;tls.ctx, setup_data))</div>
<div class="line"><a id="l01564" name="l01564"></a><span class="lineno"> 1564</span>        <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01565" name="l01565"></a><span class="lineno"> 1565</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &lt; 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01566" name="l01566"></a><span class="lineno"> 1566</span>      <span class="comment">/* libcoap is managing TLS connection based on setup_data options */</span></div>
<div class="line"><a id="l01567" name="l01567"></a><span class="lineno"> 1567</span>      <span class="comment">/* Need to set up logic to differentiate between a PSK or PKI session */</span></div>
<div class="line"><a id="l01568" name="l01568"></a><span class="lineno"> 1568</span>      <span class="comment">/*</span></div>
<div class="line"><a id="l01569" name="l01569"></a><span class="lineno"> 1569</span><span class="comment">       * For OpenSSL 1.1.1, we need to use SSL_CTX_set_client_hello_cb()</span></div>
<div class="line"><a id="l01570" name="l01570"></a><span class="lineno"> 1570</span><span class="comment">       * which is not in 1.1.0</span></div>
<div class="line"><a id="l01571" name="l01571"></a><span class="lineno"> 1571</span><span class="comment">       */</span></div>
<div class="line"><a id="l01572" name="l01572"></a><span class="lineno"> 1572</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01573" name="l01573"></a><span class="lineno"> 1573</span>      <span class="keywordflow">if</span> (SSLeay() &gt;= 0x10101000L) {</div>
<div class="line"><a id="l01574" name="l01574"></a><span class="lineno"> 1574</span>        <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>,</div>
<div class="line"><a id="l01575" name="l01575"></a><span class="lineno"> 1575</span>                 <span class="stringliteral">&quot;OpenSSL compiled with %lux, linked with %lux, so &quot;</span></div>
<div class="line"><a id="l01576" name="l01576"></a><span class="lineno"> 1576</span>                 <span class="stringliteral">&quot;no certificate checking\n&quot;</span>,</div>
<div class="line"><a id="l01577" name="l01577"></a><span class="lineno"> 1577</span>                 OPENSSL_VERSION_NUMBER, SSLeay());</div>
<div class="line"><a id="l01578" name="l01578"></a><span class="lineno"> 1578</span>      }</div>
<div class="line"><a id="l01579" name="l01579"></a><span class="lineno"> 1579</span>      SSL_CTX_set_tlsext_servername_arg(context-&gt;tls.ctx, &amp;context-&gt;setup_data);</div>
<div class="line"><a id="l01580" name="l01580"></a><span class="lineno"> 1580</span>      SSL_CTX_set_tlsext_servername_callback(context-&gt;tls.ctx,</div>
<div class="line"><a id="l01581" name="l01581"></a><span class="lineno"> 1581</span>                                             tls_server_name_call_back);</div>
<div class="line"><a id="l01582" name="l01582"></a><span class="lineno"> 1582</span><span class="preprocessor">#else </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01583" name="l01583"></a><span class="lineno"> 1583</span>      SSL_CTX_set_client_hello_cb(context-&gt;tls.ctx,</div>
<div class="line"><a id="l01584" name="l01584"></a><span class="lineno"> 1584</span>                                    tls_client_hello_call_back,</div>
<div class="line"><a id="l01585" name="l01585"></a><span class="lineno"> 1585</span>                                      NULL);</div>
<div class="line"><a id="l01586" name="l01586"></a><span class="lineno"> 1586</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &gt;= 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01587" name="l01587"></a><span class="lineno"> 1587</span>      <span class="comment">/* TLS Only */</span></div>
<div class="line"><a id="l01588" name="l01588"></a><span class="lineno"> 1588</span>      SSL_CTX_set_alpn_select_cb(context-&gt;tls.ctx, server_alpn_callback, NULL);</div>
<div class="line"><a id="l01589" name="l01589"></a><span class="lineno"> 1589</span>    }</div>
<div class="line"><a id="l01590" name="l01590"></a><span class="lineno"> 1590</span>  }</div>
<div class="line"><a id="l01591" name="l01591"></a><span class="lineno"> 1591</span> </div>
<div class="line"><a id="l01592" name="l01592"></a><span class="lineno"> 1592</span>  <span class="keywordflow">if</span> (!context-&gt;dtls.ssl) {</div>
<div class="line"><a id="l01593" name="l01593"></a><span class="lineno"> 1593</span>    <span class="comment">/* This is set up to handle new incoming sessions to a server */</span></div>
<div class="line"><a id="l01594" name="l01594"></a><span class="lineno"> 1594</span>    context-&gt;dtls.ssl = SSL_new(context-&gt;dtls.ctx);</div>
<div class="line"><a id="l01595" name="l01595"></a><span class="lineno"> 1595</span>    <span class="keywordflow">if</span> (!context-&gt;dtls.ssl)</div>
<div class="line"><a id="l01596" name="l01596"></a><span class="lineno"> 1596</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01597" name="l01597"></a><span class="lineno"> 1597</span>    bio = BIO_new(context-&gt;dtls.meth);</div>
<div class="line"><a id="l01598" name="l01598"></a><span class="lineno"> 1598</span>    <span class="keywordflow">if</span> (!bio) {</div>
<div class="line"><a id="l01599" name="l01599"></a><span class="lineno"> 1599</span>      SSL_free (context-&gt;dtls.ssl);</div>
<div class="line"><a id="l01600" name="l01600"></a><span class="lineno"> 1600</span>      context-&gt;dtls.ssl = NULL;</div>
<div class="line"><a id="l01601" name="l01601"></a><span class="lineno"> 1601</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01602" name="l01602"></a><span class="lineno"> 1602</span>    }</div>
<div class="line"><a id="l01603" name="l01603"></a><span class="lineno"> 1603</span>    SSL_set_bio(context-&gt;dtls.ssl, bio, bio);</div>
<div class="line"><a id="l01604" name="l01604"></a><span class="lineno"> 1604</span>    SSL_set_app_data(context-&gt;dtls.ssl, NULL);</div>
<div class="line"><a id="l01605" name="l01605"></a><span class="lineno"> 1605</span>    SSL_set_options(context-&gt;dtls.ssl, SSL_OP_COOKIE_EXCHANGE);</div>
<div class="line"><a id="l01606" name="l01606"></a><span class="lineno"> 1606</span>    SSL_set_mtu(context-&gt;dtls.ssl, <a class="code hl_define" href="pdu_8h.html#acd9e29989066f01c6951113d951cd158">COAP_DEFAULT_MTU</a>);</div>
<div class="line"><a id="l01607" name="l01607"></a><span class="lineno"> 1607</span>  }</div>
<div class="line"><a id="l01608" name="l01608"></a><span class="lineno"> 1608</span>  context-&gt;psk_pki_enabled |= IS_PKI;</div>
<div class="line"><a id="l01609" name="l01609"></a><span class="lineno"> 1609</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l01610" name="l01610"></a><span class="lineno"> 1610</span>}</div>
<div class="line"><a id="l01611" name="l01611"></a><span class="lineno"> 1611</span> </div>
<div class="line"><a id="l01612" name="l01612"></a><span class="lineno"> 1612</span><span class="keywordtype">int</span></div>
<div class="line"><a id="l01613" name="l01613"></a><span class="lineno"> 1613</span><a class="code hl_function" href="coap__notls_8c.html#a08c2d9a091673f0488b246c1019fa7db">coap_dtls_context_set_pki_root_cas</a>(<span class="keyword">struct</span> <a class="code hl_struct" href="structcoap__context__t.html">coap_context_t</a> *ctx,</div>
<div class="line"><a id="l01614" name="l01614"></a><span class="lineno"> 1614</span>                                   <span class="keyword">const</span> <span class="keywordtype">char</span> *ca_file,</div>
<div class="line"><a id="l01615" name="l01615"></a><span class="lineno"> 1615</span>                                   <span class="keyword">const</span> <span class="keywordtype">char</span> *ca_dir</div>
<div class="line"><a id="l01616" name="l01616"></a><span class="lineno"> 1616</span>) {</div>
<div class="line"><a id="l01617" name="l01617"></a><span class="lineno"> 1617</span>  coap_openssl_context_t *context =</div>
<div class="line"><a id="l01618" name="l01618"></a><span class="lineno"> 1618</span>                                ((coap_openssl_context_t *)ctx-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01619" name="l01619"></a><span class="lineno"> 1619</span>  <span class="keywordflow">if</span> (context-&gt;dtls.ctx) {</div>
<div class="line"><a id="l01620" name="l01620"></a><span class="lineno"> 1620</span>    <span class="keywordflow">if</span> (!SSL_CTX_load_verify_locations(context-&gt;dtls.ctx, ca_file, ca_dir)) {</div>
<div class="line"><a id="l01621" name="l01621"></a><span class="lineno"> 1621</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;Unable to install root CAs (%s/%s)\n&quot;</span>,</div>
<div class="line"><a id="l01622" name="l01622"></a><span class="lineno"> 1622</span>               ca_file ? ca_file : <span class="stringliteral">&quot;NULL&quot;</span>, ca_dir ? ca_dir : <span class="stringliteral">&quot;NULL&quot;</span>);</div>
<div class="line"><a id="l01623" name="l01623"></a><span class="lineno"> 1623</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01624" name="l01624"></a><span class="lineno"> 1624</span>    }</div>
<div class="line"><a id="l01625" name="l01625"></a><span class="lineno"> 1625</span>  }</div>
<div class="line"><a id="l01626" name="l01626"></a><span class="lineno"> 1626</span>  <span class="keywordflow">if</span> (context-&gt;tls.ctx) {</div>
<div class="line"><a id="l01627" name="l01627"></a><span class="lineno"> 1627</span>    <span class="keywordflow">if</span> (!SSL_CTX_load_verify_locations(context-&gt;tls.ctx, ca_file, ca_dir)) {</div>
<div class="line"><a id="l01628" name="l01628"></a><span class="lineno"> 1628</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;Unable to install root CAs (%s/%s)\n&quot;</span>,</div>
<div class="line"><a id="l01629" name="l01629"></a><span class="lineno"> 1629</span>               ca_file ? ca_file : <span class="stringliteral">&quot;NULL&quot;</span>, ca_dir ? ca_dir : <span class="stringliteral">&quot;NULL&quot;</span>);</div>
<div class="line"><a id="l01630" name="l01630"></a><span class="lineno"> 1630</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01631" name="l01631"></a><span class="lineno"> 1631</span>    }</div>
<div class="line"><a id="l01632" name="l01632"></a><span class="lineno"> 1632</span>  }</div>
<div class="line"><a id="l01633" name="l01633"></a><span class="lineno"> 1633</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l01634" name="l01634"></a><span class="lineno"> 1634</span>}</div>
<div class="line"><a id="l01635" name="l01635"></a><span class="lineno"> 1635</span> </div>
<div class="line"><a id="l01636" name="l01636"></a><span class="lineno"> 1636</span><span class="keywordtype">int</span></div>
<div class="line"><a id="l01637" name="l01637"></a><span class="lineno"> 1637</span><a class="code hl_function" href="coap__notls_8c.html#a9c204e7d2d3106cfb6cf610ab4652628">coap_dtls_context_check_keys_enabled</a>(<a class="code hl_struct" href="structcoap__context__t.html">coap_context_t</a> *ctx)</div>
<div class="line"><a id="l01638" name="l01638"></a><span class="lineno"> 1638</span>{</div>
<div class="line"><a id="l01639" name="l01639"></a><span class="lineno"> 1639</span>  coap_openssl_context_t *context =</div>
<div class="line"><a id="l01640" name="l01640"></a><span class="lineno"> 1640</span>                                 ((coap_openssl_context_t *)ctx-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01641" name="l01641"></a><span class="lineno"> 1641</span>  <span class="keywordflow">return</span> context-&gt;psk_pki_enabled ? 1 : 0;</div>
<div class="line"><a id="l01642" name="l01642"></a><span class="lineno"> 1642</span>}</div>
<div class="line"><a id="l01643" name="l01643"></a><span class="lineno"> 1643</span> </div>
<div class="line"><a id="l01644" name="l01644"></a><span class="lineno"> 1644</span> </div>
<div class="line"><a id="l01645" name="l01645"></a><span class="lineno"> 1645</span><span class="keywordtype">void</span> <a class="code hl_function" href="coap__notls_8c.html#ab6dd0798202ab0ff55fc7024e80a72d1">coap_dtls_free_context</a>(<span class="keywordtype">void</span> *handle) {</div>
<div class="line"><a id="l01646" name="l01646"></a><span class="lineno"> 1646</span>  <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a id="l01647" name="l01647"></a><span class="lineno"> 1647</span>  coap_openssl_context_t *context = (coap_openssl_context_t *)handle;</div>
<div class="line"><a id="l01648" name="l01648"></a><span class="lineno"> 1648</span> </div>
<div class="line"><a id="l01649" name="l01649"></a><span class="lineno"> 1649</span>  <span class="keywordflow">if</span> (context-&gt;dtls.ssl)</div>
<div class="line"><a id="l01650" name="l01650"></a><span class="lineno"> 1650</span>    SSL_free(context-&gt;dtls.ssl);</div>
<div class="line"><a id="l01651" name="l01651"></a><span class="lineno"> 1651</span>  <span class="keywordflow">if</span> (context-&gt;dtls.ctx)</div>
<div class="line"><a id="l01652" name="l01652"></a><span class="lineno"> 1652</span>    SSL_CTX_free(context-&gt;dtls.ctx);</div>
<div class="line"><a id="l01653" name="l01653"></a><span class="lineno"> 1653</span>  <span class="keywordflow">if</span> (context-&gt;dtls.cookie_hmac)</div>
<div class="line"><a id="l01654" name="l01654"></a><span class="lineno"> 1654</span>    HMAC_CTX_free(context-&gt;dtls.cookie_hmac);</div>
<div class="line"><a id="l01655" name="l01655"></a><span class="lineno"> 1655</span>  <span class="keywordflow">if</span> (context-&gt;dtls.meth)</div>
<div class="line"><a id="l01656" name="l01656"></a><span class="lineno"> 1656</span>    BIO_meth_free(context-&gt;dtls.meth);</div>
<div class="line"><a id="l01657" name="l01657"></a><span class="lineno"> 1657</span>  <span class="keywordflow">if</span> (context-&gt;dtls.bio_addr)</div>
<div class="line"><a id="l01658" name="l01658"></a><span class="lineno"> 1658</span>    BIO_ADDR_free(context-&gt;dtls.bio_addr);</div>
<div class="line"><a id="l01659" name="l01659"></a><span class="lineno"> 1659</span>  <span class="keywordflow">if</span> ( context-&gt;tls.ctx )</div>
<div class="line"><a id="l01660" name="l01660"></a><span class="lineno"> 1660</span>      SSL_CTX_free( context-&gt;tls.ctx );</div>
<div class="line"><a id="l01661" name="l01661"></a><span class="lineno"> 1661</span>  <span class="keywordflow">if</span> ( context-&gt;tls.meth )</div>
<div class="line"><a id="l01662" name="l01662"></a><span class="lineno"> 1662</span>      BIO_meth_free( context-&gt;tls.meth );</div>
<div class="line"><a id="l01663" name="l01663"></a><span class="lineno"> 1663</span>  <span class="keywordflow">for</span> (i = 0; i &lt; context-&gt;sni_count; i++) {</div>
<div class="line"><a id="l01664" name="l01664"></a><span class="lineno"> 1664</span>    OPENSSL_free(context-&gt;sni_entry_list[i].sni);</div>
<div class="line"><a id="l01665" name="l01665"></a><span class="lineno"> 1665</span><span class="preprocessor">#if OPENSSL_VERSION_NUMBER &lt; 0x10101000L</span></div>
<div class="line"><a id="l01666" name="l01666"></a><span class="lineno"> 1666</span>    SSL_CTX_free(context-&gt;sni_entry_list[i].ctx);</div>
<div class="line"><a id="l01667" name="l01667"></a><span class="lineno"> 1667</span><span class="preprocessor">#endif </span><span class="comment">/* OPENSSL_VERSION_NUMBER &lt; 0x10101000L */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l01668" name="l01668"></a><span class="lineno"> 1668</span>  }</div>
<div class="line"><a id="l01669" name="l01669"></a><span class="lineno"> 1669</span>  <span class="keywordflow">if</span> (context-&gt;sni_count)</div>
<div class="line"><a id="l01670" name="l01670"></a><span class="lineno"> 1670</span>    OPENSSL_free(context-&gt;sni_entry_list);</div>
<div class="line"><a id="l01671" name="l01671"></a><span class="lineno"> 1671</span>  <a class="code hl_function" href="mem_8h.html#a1e46a1505bb13f03fdacd5d1b32502a6">coap_free</a>(context);</div>
<div class="line"><a id="l01672" name="l01672"></a><span class="lineno"> 1672</span>}</div>
<div class="line"><a id="l01673" name="l01673"></a><span class="lineno"> 1673</span> </div>
<div class="line"><a id="l01674" name="l01674"></a><span class="lineno"> 1674</span><span class="keywordtype">void</span> * <a class="code hl_function" href="coap__notls_8c.html#a11ce0122c8ecc161bb42f634f5902796">coap_dtls_new_server_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01675" name="l01675"></a><span class="lineno"> 1675</span>  BIO *nbio = NULL;</div>
<div class="line"><a id="l01676" name="l01676"></a><span class="lineno"> 1676</span>  SSL *nssl = NULL, *ssl = NULL;</div>
<div class="line"><a id="l01677" name="l01677"></a><span class="lineno"> 1677</span>  coap_ssl_data *data;</div>
<div class="line"><a id="l01678" name="l01678"></a><span class="lineno"> 1678</span>  coap_dtls_context_t *dtls = &amp;((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>)-&gt;dtls;</div>
<div class="line"><a id="l01679" name="l01679"></a><span class="lineno"> 1679</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l01680" name="l01680"></a><span class="lineno"> 1680</span> </div>
<div class="line"><a id="l01681" name="l01681"></a><span class="lineno"> 1681</span>  nssl = SSL_new(dtls-&gt;ctx);</div>
<div class="line"><a id="l01682" name="l01682"></a><span class="lineno"> 1682</span>  <span class="keywordflow">if</span> (!nssl)</div>
<div class="line"><a id="l01683" name="l01683"></a><span class="lineno"> 1683</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01684" name="l01684"></a><span class="lineno"> 1684</span>  nbio = BIO_new(dtls-&gt;meth);</div>
<div class="line"><a id="l01685" name="l01685"></a><span class="lineno"> 1685</span>  <span class="keywordflow">if</span> (!nbio)</div>
<div class="line"><a id="l01686" name="l01686"></a><span class="lineno"> 1686</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01687" name="l01687"></a><span class="lineno"> 1687</span>  SSL_set_bio(nssl, nbio, nbio);</div>
<div class="line"><a id="l01688" name="l01688"></a><span class="lineno"> 1688</span>  SSL_set_app_data(nssl, NULL);</div>
<div class="line"><a id="l01689" name="l01689"></a><span class="lineno"> 1689</span>  SSL_set_options(nssl, SSL_OP_COOKIE_EXCHANGE);</div>
<div class="line"><a id="l01690" name="l01690"></a><span class="lineno"> 1690</span>  SSL_set_mtu(nssl, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#ac126597f3f66272ed3e9c5439570e4df">mtu</a>);</div>
<div class="line"><a id="l01691" name="l01691"></a><span class="lineno"> 1691</span>  ssl = dtls-&gt;ssl;</div>
<div class="line"><a id="l01692" name="l01692"></a><span class="lineno"> 1692</span>  dtls-&gt;ssl = nssl;</div>
<div class="line"><a id="l01693" name="l01693"></a><span class="lineno"> 1693</span>  nssl = NULL;</div>
<div class="line"><a id="l01694" name="l01694"></a><span class="lineno"> 1694</span>  SSL_set_app_data(ssl, session);</div>
<div class="line"><a id="l01695" name="l01695"></a><span class="lineno"> 1695</span> </div>
<div class="line"><a id="l01696" name="l01696"></a><span class="lineno"> 1696</span>  data = (coap_ssl_data*)BIO_get_data(SSL_get_rbio(ssl));</div>
<div class="line"><a id="l01697" name="l01697"></a><span class="lineno"> 1697</span>  data-&gt;session = session;</div>
<div class="line"><a id="l01698" name="l01698"></a><span class="lineno"> 1698</span> </div>
<div class="line"><a id="l01699" name="l01699"></a><span class="lineno"> 1699</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#aca05833745124e6987489c8ecfebcb63">get_server_hint</a>) {</div>
<div class="line"><a id="l01700" name="l01700"></a><span class="lineno"> 1700</span>    <span class="keywordtype">char</span> hint[128] = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l01701" name="l01701"></a><span class="lineno"> 1701</span>    <span class="keywordtype">size_t</span> hint_len = session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#aca05833745124e6987489c8ecfebcb63">get_server_hint</a>(session, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)hint, <span class="keyword">sizeof</span>(hint) - 1);</div>
<div class="line"><a id="l01702" name="l01702"></a><span class="lineno"> 1702</span>    <span class="keywordflow">if</span> (hint_len &gt; 0 &amp;&amp; hint_len &lt; <span class="keyword">sizeof</span>(hint)) {</div>
<div class="line"><a id="l01703" name="l01703"></a><span class="lineno"> 1703</span>      hint[hint_len] = 0;</div>
<div class="line"><a id="l01704" name="l01704"></a><span class="lineno"> 1704</span>      SSL_use_psk_identity_hint(ssl, hint);</div>
<div class="line"><a id="l01705" name="l01705"></a><span class="lineno"> 1705</span>    }</div>
<div class="line"><a id="l01706" name="l01706"></a><span class="lineno"> 1706</span>  }</div>
<div class="line"><a id="l01707" name="l01707"></a><span class="lineno"> 1707</span> </div>
<div class="line"><a id="l01708" name="l01708"></a><span class="lineno"> 1708</span>  r = SSL_accept(ssl);</div>
<div class="line"><a id="l01709" name="l01709"></a><span class="lineno"> 1709</span>  <span class="keywordflow">if</span> (r == -1) {</div>
<div class="line"><a id="l01710" name="l01710"></a><span class="lineno"> 1710</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l01711" name="l01711"></a><span class="lineno"> 1711</span>    <span class="keywordflow">if</span> (err != SSL_ERROR_WANT_READ &amp;&amp; err != SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l01712" name="l01712"></a><span class="lineno"> 1712</span>      r = 0;</div>
<div class="line"><a id="l01713" name="l01713"></a><span class="lineno"> 1713</span>  }</div>
<div class="line"><a id="l01714" name="l01714"></a><span class="lineno"> 1714</span> </div>
<div class="line"><a id="l01715" name="l01715"></a><span class="lineno"> 1715</span>  <span class="keywordflow">if</span> (r == 0) {</div>
<div class="line"><a id="l01716" name="l01716"></a><span class="lineno"> 1716</span>    SSL_free(ssl);</div>
<div class="line"><a id="l01717" name="l01717"></a><span class="lineno"> 1717</span>    <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l01718" name="l01718"></a><span class="lineno"> 1718</span>  }</div>
<div class="line"><a id="l01719" name="l01719"></a><span class="lineno"> 1719</span> </div>
<div class="line"><a id="l01720" name="l01720"></a><span class="lineno"> 1720</span>  <span class="keywordflow">return</span> ssl;</div>
<div class="line"><a id="l01721" name="l01721"></a><span class="lineno"> 1721</span> </div>
<div class="line"><a id="l01722" name="l01722"></a><span class="lineno"> 1722</span>error:</div>
<div class="line"><a id="l01723" name="l01723"></a><span class="lineno"> 1723</span>  <span class="keywordflow">if</span> (nssl)</div>
<div class="line"><a id="l01724" name="l01724"></a><span class="lineno"> 1724</span>    SSL_free(nssl);</div>
<div class="line"><a id="l01725" name="l01725"></a><span class="lineno"> 1725</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l01726" name="l01726"></a><span class="lineno"> 1726</span>}</div>
<div class="line"><a id="l01727" name="l01727"></a><span class="lineno"> 1727</span> </div>
<div class="line"><a id="l01728" name="l01728"></a><span class="lineno"> 1728</span><span class="keyword">static</span> <span class="keywordtype">int</span></div>
<div class="line"><a id="l01729" name="l01729"></a><span class="lineno"> 1729</span>setup_client_ssl_session(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session, SSL *ssl</div>
<div class="line"><a id="l01730" name="l01730"></a><span class="lineno"> 1730</span>) {</div>
<div class="line"><a id="l01731" name="l01731"></a><span class="lineno"> 1731</span>  coap_openssl_context_t *context = ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01732" name="l01732"></a><span class="lineno"> 1732</span> </div>
<div class="line"><a id="l01733" name="l01733"></a><span class="lineno"> 1733</span>  <span class="keywordflow">if</span> (context-&gt;psk_pki_enabled &amp; IS_PSK) {</div>
<div class="line"><a id="l01734" name="l01734"></a><span class="lineno"> 1734</span>    SSL_set_psk_client_callback(ssl, coap_dtls_psk_client_callback);</div>
<div class="line"><a id="l01735" name="l01735"></a><span class="lineno"> 1735</span>    SSL_set_psk_server_callback(ssl, coap_dtls_psk_server_callback);</div>
<div class="line"><a id="l01736" name="l01736"></a><span class="lineno"> 1736</span>    SSL_set_cipher_list(ssl, <span class="stringliteral">&quot;PSK:!NULL&quot;</span>);</div>
<div class="line"><a id="l01737" name="l01737"></a><span class="lineno"> 1737</span>  }</div>
<div class="line"><a id="l01738" name="l01738"></a><span class="lineno"> 1738</span>  <span class="keywordflow">if</span> (context-&gt;psk_pki_enabled &amp; IS_PKI) {</div>
<div class="line"><a id="l01739" name="l01739"></a><span class="lineno"> 1739</span>    <a class="code hl_struct" href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a> *setup_data = &amp;context-&gt;setup_data;</div>
<div class="line"><a id="l01740" name="l01740"></a><span class="lineno"> 1740</span>    <span class="keywordflow">if</span> (!setup_pki_ssl(ssl, setup_data, 0))</div>
<div class="line"><a id="l01741" name="l01741"></a><span class="lineno"> 1741</span>      <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01742" name="l01742"></a><span class="lineno"> 1742</span>    <span class="comment">/* libcoap is managing (D)TLS connection based on setup_data options */</span></div>
<div class="line"><a id="l01743" name="l01743"></a><span class="lineno"> 1743</span>    <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a62089dd9c72836d322ae0ce0d0e7114f">proto</a> == <a class="code hl_define" href="pdu_8h.html#a6c9a1dd7b311e5a420e3a7c36b918a02">COAP_PROTO_TLS</a>)</div>
<div class="line"><a id="l01744" name="l01744"></a><span class="lineno"> 1744</span>      SSL_set_alpn_protos(ssl, coap_alpn, <span class="keyword">sizeof</span>(coap_alpn));</div>
<div class="line"><a id="l01745" name="l01745"></a><span class="lineno"> 1745</span> </div>
<div class="line"><a id="l01746" name="l01746"></a><span class="lineno"> 1746</span>    <span class="comment">/* Issue SNI if requested */</span></div>
<div class="line"><a id="l01747" name="l01747"></a><span class="lineno"> 1747</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#abcd4a892d8823201b52597b702e70348">client_sni</a> &amp;&amp;</div>
<div class="line"><a id="l01748" name="l01748"></a><span class="lineno"> 1748</span>        SSL_set_tlsext_host_name (ssl, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#abcd4a892d8823201b52597b702e70348">client_sni</a>) != 1) {</div>
<div class="line"><a id="l01749" name="l01749"></a><span class="lineno"> 1749</span>          <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;SSL_set_tlsext_host_name: set &#39;%s&#39; failed&quot;</span>,</div>
<div class="line"><a id="l01750" name="l01750"></a><span class="lineno"> 1750</span>                   setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#abcd4a892d8823201b52597b702e70348">client_sni</a>);</div>
<div class="line"><a id="l01751" name="l01751"></a><span class="lineno"> 1751</span>    }</div>
<div class="line"><a id="l01752" name="l01752"></a><span class="lineno"> 1752</span>    <span class="comment">/* Certificate Revocation */</span></div>
<div class="line"><a id="l01753" name="l01753"></a><span class="lineno"> 1753</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a6651ec064838213f18f49c6044cc7b4f">check_cert_revocation</a>) {</div>
<div class="line"><a id="l01754" name="l01754"></a><span class="lineno"> 1754</span>       X509_VERIFY_PARAM *param;</div>
<div class="line"><a id="l01755" name="l01755"></a><span class="lineno"> 1755</span> </div>
<div class="line"><a id="l01756" name="l01756"></a><span class="lineno"> 1756</span>       param = X509_VERIFY_PARAM_new();</div>
<div class="line"><a id="l01757" name="l01757"></a><span class="lineno"> 1757</span>       X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK);</div>
<div class="line"><a id="l01758" name="l01758"></a><span class="lineno"> 1758</span>       SSL_set1_param(ssl, param);</div>
<div class="line"><a id="l01759" name="l01759"></a><span class="lineno"> 1759</span>       X509_VERIFY_PARAM_free(param);</div>
<div class="line"><a id="l01760" name="l01760"></a><span class="lineno"> 1760</span>    }</div>
<div class="line"><a id="l01761" name="l01761"></a><span class="lineno"> 1761</span> </div>
<div class="line"><a id="l01762" name="l01762"></a><span class="lineno"> 1762</span>    <span class="comment">/* Verify Peer */</span></div>
<div class="line"><a id="l01763" name="l01763"></a><span class="lineno"> 1763</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#aac00e49483212c37c25435f03a6a6cb6">verify_peer_cert</a>)</div>
<div class="line"><a id="l01764" name="l01764"></a><span class="lineno"> 1764</span>      SSL_set_verify(ssl, SSL_VERIFY_PEER, tls_verify_call_back);</div>
<div class="line"><a id="l01765" name="l01765"></a><span class="lineno"> 1765</span>    <span class="keywordflow">else</span></div>
<div class="line"><a id="l01766" name="l01766"></a><span class="lineno"> 1766</span>      SSL_set_verify(ssl, SSL_VERIFY_NONE, NULL);</div>
<div class="line"><a id="l01767" name="l01767"></a><span class="lineno"> 1767</span> </div>
<div class="line"><a id="l01768" name="l01768"></a><span class="lineno"> 1768</span>    <span class="comment">/* Check CA Chain */</span></div>
<div class="line"><a id="l01769" name="l01769"></a><span class="lineno"> 1769</span>    <span class="keywordflow">if</span> (setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a3f0ebaa3461576eee13f74ea5a362247">cert_chain_validation</a>)</div>
<div class="line"><a id="l01770" name="l01770"></a><span class="lineno"> 1770</span>      SSL_set_verify_depth(ssl, setup_data-&gt;<a class="code hl_variable" href="structcoap__dtls__pki__t.html#a85209ca6aa358e45b4b065b0c39dd360">cert_chain_verify_depth</a>);</div>
<div class="line"><a id="l01771" name="l01771"></a><span class="lineno"> 1771</span> </div>
<div class="line"><a id="l01772" name="l01772"></a><span class="lineno"> 1772</span>  }</div>
<div class="line"><a id="l01773" name="l01773"></a><span class="lineno"> 1773</span>  <span class="keywordflow">return</span> 1;</div>
<div class="line"><a id="l01774" name="l01774"></a><span class="lineno"> 1774</span>}</div>
<div class="line"><a id="l01775" name="l01775"></a><span class="lineno"> 1775</span> </div>
<div class="line"><a id="l01776" name="l01776"></a><span class="lineno"> 1776</span><span class="keywordtype">void</span> *<a class="code hl_function" href="coap__notls_8c.html#ae4b316b8d30a716c6faeceb1cb8d9b8d">coap_dtls_new_client_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01777" name="l01777"></a><span class="lineno"> 1777</span>  BIO *bio = NULL;</div>
<div class="line"><a id="l01778" name="l01778"></a><span class="lineno"> 1778</span>  SSL *ssl = NULL;</div>
<div class="line"><a id="l01779" name="l01779"></a><span class="lineno"> 1779</span>  coap_ssl_data *data;</div>
<div class="line"><a id="l01780" name="l01780"></a><span class="lineno"> 1780</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l01781" name="l01781"></a><span class="lineno"> 1781</span>  coap_openssl_context_t *context = ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l01782" name="l01782"></a><span class="lineno"> 1782</span>  coap_dtls_context_t *dtls = &amp;context-&gt;dtls;</div>
<div class="line"><a id="l01783" name="l01783"></a><span class="lineno"> 1783</span> </div>
<div class="line"><a id="l01784" name="l01784"></a><span class="lineno"> 1784</span>  ssl = SSL_new(dtls-&gt;ctx);</div>
<div class="line"><a id="l01785" name="l01785"></a><span class="lineno"> 1785</span>  <span class="keywordflow">if</span> (!ssl)</div>
<div class="line"><a id="l01786" name="l01786"></a><span class="lineno"> 1786</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01787" name="l01787"></a><span class="lineno"> 1787</span>  bio = BIO_new(dtls-&gt;meth);</div>
<div class="line"><a id="l01788" name="l01788"></a><span class="lineno"> 1788</span>  <span class="keywordflow">if</span> (!bio)</div>
<div class="line"><a id="l01789" name="l01789"></a><span class="lineno"> 1789</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01790" name="l01790"></a><span class="lineno"> 1790</span>  data = (coap_ssl_data *)BIO_get_data(bio);</div>
<div class="line"><a id="l01791" name="l01791"></a><span class="lineno"> 1791</span>  data-&gt;session = session;</div>
<div class="line"><a id="l01792" name="l01792"></a><span class="lineno"> 1792</span>  SSL_set_bio(ssl, bio, bio);</div>
<div class="line"><a id="l01793" name="l01793"></a><span class="lineno"> 1793</span>  SSL_set_app_data(ssl, session);</div>
<div class="line"><a id="l01794" name="l01794"></a><span class="lineno"> 1794</span>  SSL_set_options(ssl, SSL_OP_COOKIE_EXCHANGE);</div>
<div class="line"><a id="l01795" name="l01795"></a><span class="lineno"> 1795</span>  SSL_set_mtu(ssl, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#ac126597f3f66272ed3e9c5439570e4df">mtu</a>);</div>
<div class="line"><a id="l01796" name="l01796"></a><span class="lineno"> 1796</span> </div>
<div class="line"><a id="l01797" name="l01797"></a><span class="lineno"> 1797</span>  <span class="keywordflow">if</span> (!setup_client_ssl_session(session, ssl))</div>
<div class="line"><a id="l01798" name="l01798"></a><span class="lineno"> 1798</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01799" name="l01799"></a><span class="lineno"> 1799</span> </div>
<div class="line"><a id="l01800" name="l01800"></a><span class="lineno"> 1800</span>  session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a0e449eb256836dcf5932791f53881b6e">dtls_timeout_count</a> = 0;</div>
<div class="line"><a id="l01801" name="l01801"></a><span class="lineno"> 1801</span> </div>
<div class="line"><a id="l01802" name="l01802"></a><span class="lineno"> 1802</span>  r = SSL_connect(ssl);</div>
<div class="line"><a id="l01803" name="l01803"></a><span class="lineno"> 1803</span>  <span class="keywordflow">if</span> (r == -1) {</div>
<div class="line"><a id="l01804" name="l01804"></a><span class="lineno"> 1804</span>    <span class="keywordtype">int</span> ret = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l01805" name="l01805"></a><span class="lineno"> 1805</span>    <span class="keywordflow">if</span> (ret != SSL_ERROR_WANT_READ &amp;&amp; ret != SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l01806" name="l01806"></a><span class="lineno"> 1806</span>      r = 0;</div>
<div class="line"><a id="l01807" name="l01807"></a><span class="lineno"> 1807</span>  }</div>
<div class="line"><a id="l01808" name="l01808"></a><span class="lineno"> 1808</span> </div>
<div class="line"><a id="l01809" name="l01809"></a><span class="lineno"> 1809</span>  <span class="keywordflow">if</span> (r == 0)</div>
<div class="line"><a id="l01810" name="l01810"></a><span class="lineno"> 1810</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l01811" name="l01811"></a><span class="lineno"> 1811</span> </div>
<div class="line"><a id="l01812" name="l01812"></a><span class="lineno"> 1812</span>  <span class="keywordflow">return</span> ssl;</div>
<div class="line"><a id="l01813" name="l01813"></a><span class="lineno"> 1813</span> </div>
<div class="line"><a id="l01814" name="l01814"></a><span class="lineno"> 1814</span>error:</div>
<div class="line"><a id="l01815" name="l01815"></a><span class="lineno"> 1815</span>  <span class="keywordflow">if</span> (ssl)</div>
<div class="line"><a id="l01816" name="l01816"></a><span class="lineno"> 1816</span>    SSL_free(ssl);</div>
<div class="line"><a id="l01817" name="l01817"></a><span class="lineno"> 1817</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l01818" name="l01818"></a><span class="lineno"> 1818</span>}</div>
<div class="line"><a id="l01819" name="l01819"></a><span class="lineno"> 1819</span> </div>
<div class="line"><a id="l01820" name="l01820"></a><span class="lineno"> 1820</span><span class="keywordtype">void</span> <a class="code hl_function" href="coap__notls_8c.html#aa7b1a73a52fc6f3e6e00c001363f9bfa">coap_dtls_session_update_mtu</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01821" name="l01821"></a><span class="lineno"> 1821</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01822" name="l01822"></a><span class="lineno"> 1822</span>  <span class="keywordflow">if</span> (ssl)</div>
<div class="line"><a id="l01823" name="l01823"></a><span class="lineno"> 1823</span>    SSL_set_mtu(ssl, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#ac126597f3f66272ed3e9c5439570e4df">mtu</a>);</div>
<div class="line"><a id="l01824" name="l01824"></a><span class="lineno"> 1824</span>}</div>
<div class="line"><a id="l01825" name="l01825"></a><span class="lineno"> 1825</span> </div>
<div class="line"><a id="l01826" name="l01826"></a><span class="lineno"> 1826</span><span class="keywordtype">void</span> <a class="code hl_function" href="coap__notls_8c.html#aaf93788bf08a0459d28eaca3cafe930f">coap_dtls_free_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01827" name="l01827"></a><span class="lineno"> 1827</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01828" name="l01828"></a><span class="lineno"> 1828</span>  <span class="keywordflow">if</span> (ssl) {</div>
<div class="line"><a id="l01829" name="l01829"></a><span class="lineno"> 1829</span>    <span class="keywordflow">if</span> (!SSL_in_init(ssl) &amp;&amp; !(SSL_get_shutdown(ssl) &amp; SSL_SENT_SHUTDOWN)) {</div>
<div class="line"><a id="l01830" name="l01830"></a><span class="lineno"> 1830</span>      <span class="keywordtype">int</span> r = SSL_shutdown(ssl);</div>
<div class="line"><a id="l01831" name="l01831"></a><span class="lineno"> 1831</span>      <span class="keywordflow">if</span> (r == 0) r = SSL_shutdown(ssl);</div>
<div class="line"><a id="l01832" name="l01832"></a><span class="lineno"> 1832</span>    }</div>
<div class="line"><a id="l01833" name="l01833"></a><span class="lineno"> 1833</span>    SSL_free(ssl);</div>
<div class="line"><a id="l01834" name="l01834"></a><span class="lineno"> 1834</span>    session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a> = NULL;</div>
<div class="line"><a id="l01835" name="l01835"></a><span class="lineno"> 1835</span>  }</div>
<div class="line"><a id="l01836" name="l01836"></a><span class="lineno"> 1836</span>}</div>
<div class="line"><a id="l01837" name="l01837"></a><span class="lineno"> 1837</span> </div>
<div class="line"><a id="l01838" name="l01838"></a><span class="lineno"> 1838</span><span class="keywordtype">int</span> <a class="code hl_function" href="coap__notls_8c.html#aab0e2b48071ed723e10cc8f10379abca">coap_dtls_send</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session,</div>
<div class="line"><a id="l01839" name="l01839"></a><span class="lineno"> 1839</span>  <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *data, <span class="keywordtype">size_t</span> data_len) {</div>
<div class="line"><a id="l01840" name="l01840"></a><span class="lineno"> 1840</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l01841" name="l01841"></a><span class="lineno"> 1841</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01842" name="l01842"></a><span class="lineno"> 1842</span> </div>
<div class="line"><a id="l01843" name="l01843"></a><span class="lineno"> 1843</span>  <a class="code hl_define" href="mem_8c.html#a3d4ae9c092e117c836f52dc7d7cee574">assert</a>(ssl != NULL);</div>
<div class="line"><a id="l01844" name="l01844"></a><span class="lineno"> 1844</span> </div>
<div class="line"><a id="l01845" name="l01845"></a><span class="lineno"> 1845</span>  session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = -1;</div>
<div class="line"><a id="l01846" name="l01846"></a><span class="lineno"> 1846</span>  r = SSL_write(ssl, data, (<span class="keywordtype">int</span>)data_len);</div>
<div class="line"><a id="l01847" name="l01847"></a><span class="lineno"> 1847</span> </div>
<div class="line"><a id="l01848" name="l01848"></a><span class="lineno"> 1848</span>  <span class="keywordflow">if</span> (r &lt;= 0) {</div>
<div class="line"><a id="l01849" name="l01849"></a><span class="lineno"> 1849</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l01850" name="l01850"></a><span class="lineno"> 1850</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ || err == SSL_ERROR_WANT_WRITE) {</div>
<div class="line"><a id="l01851" name="l01851"></a><span class="lineno"> 1851</span>      r = 0;</div>
<div class="line"><a id="l01852" name="l01852"></a><span class="lineno"> 1852</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01853" name="l01853"></a><span class="lineno"> 1853</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;coap_dtls_send: cannot send PDU\n&quot;</span>);</div>
<div class="line"><a id="l01854" name="l01854"></a><span class="lineno"> 1854</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_ZERO_RETURN)</div>
<div class="line"><a id="l01855" name="l01855"></a><span class="lineno"> 1855</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>;</div>
<div class="line"><a id="l01856" name="l01856"></a><span class="lineno"> 1856</span>      <span class="keywordflow">else</span> <span class="keywordflow">if</span> (err == SSL_ERROR_SSL)</div>
<div class="line"><a id="l01857" name="l01857"></a><span class="lineno"> 1857</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a>;</div>
<div class="line"><a id="l01858" name="l01858"></a><span class="lineno"> 1858</span>      r = -1;</div>
<div class="line"><a id="l01859" name="l01859"></a><span class="lineno"> 1859</span>    }</div>
<div class="line"><a id="l01860" name="l01860"></a><span class="lineno"> 1860</span>  }</div>
<div class="line"><a id="l01861" name="l01861"></a><span class="lineno"> 1861</span> </div>
<div class="line"><a id="l01862" name="l01862"></a><span class="lineno"> 1862</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> &gt;= 0) {</div>
<div class="line"><a id="l01863" name="l01863"></a><span class="lineno"> 1863</span>    <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a>, session);</div>
<div class="line"><a id="l01864" name="l01864"></a><span class="lineno"> 1864</span>    <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a> ||</div>
<div class="line"><a id="l01865" name="l01865"></a><span class="lineno"> 1865</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>) {</div>
<div class="line"><a id="l01866" name="l01866"></a><span class="lineno"> 1866</span>      <a class="code hl_function" href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a>(session, <a class="code hl_enumvalue" href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a>);</div>
<div class="line"><a id="l01867" name="l01867"></a><span class="lineno"> 1867</span>      r = -1;</div>
<div class="line"><a id="l01868" name="l01868"></a><span class="lineno"> 1868</span>    }</div>
<div class="line"><a id="l01869" name="l01869"></a><span class="lineno"> 1869</span>  }</div>
<div class="line"><a id="l01870" name="l01870"></a><span class="lineno"> 1870</span> </div>
<div class="line"><a id="l01871" name="l01871"></a><span class="lineno"> 1871</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l01872" name="l01872"></a><span class="lineno"> 1872</span>}</div>
<div class="line"><a id="l01873" name="l01873"></a><span class="lineno"> 1873</span> </div>
<div class="line"><a id="l01874" name="l01874"></a><span class="lineno"> 1874</span><span class="keywordtype">int</span> <a class="code hl_function" href="group__dtls__internal.html#ga7954de23333db4fdc4043c35022e49f5">coap_dtls_is_context_timeout</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l01875" name="l01875"></a><span class="lineno"> 1875</span>  <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01876" name="l01876"></a><span class="lineno"> 1876</span>}</div>
<div class="line"><a id="l01877" name="l01877"></a><span class="lineno"> 1877</span> </div>
<div class="line"><a id="l01878" name="l01878"></a><span class="lineno"> 1878</span><a class="code hl_typedef" href="group__clock.html#ga97ff1502e211b4ee6c3f15a598833438">coap_tick_t</a> <a class="code hl_function" href="coap__notls_8c.html#a42d4e2a9f45fc8673a09da2f7bf7bfac">coap_dtls_get_context_timeout</a>(<span class="keywordtype">void</span> *dtls_context) {</div>
<div class="line"><a id="l01879" name="l01879"></a><span class="lineno"> 1879</span>  (void)dtls_context;</div>
<div class="line"><a id="l01880" name="l01880"></a><span class="lineno"> 1880</span>  <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l01881" name="l01881"></a><span class="lineno"> 1881</span>}</div>
<div class="line"><a id="l01882" name="l01882"></a><span class="lineno"> 1882</span> </div>
<div class="line"><a id="l01883" name="l01883"></a><span class="lineno"> 1883</span><a class="code hl_typedef" href="group__clock.html#ga97ff1502e211b4ee6c3f15a598833438">coap_tick_t</a> <a class="code hl_function" href="coap__notls_8c.html#a874aa6baedd8c5680142af7534fb4ffb">coap_dtls_get_timeout</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01884" name="l01884"></a><span class="lineno"> 1884</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01885" name="l01885"></a><span class="lineno"> 1885</span>  coap_ssl_data *ssl_data;</div>
<div class="line"><a id="l01886" name="l01886"></a><span class="lineno"> 1886</span> </div>
<div class="line"><a id="l01887" name="l01887"></a><span class="lineno"> 1887</span>  <a class="code hl_define" href="mem_8c.html#a3d4ae9c092e117c836f52dc7d7cee574">assert</a>(ssl != NULL);</div>
<div class="line"><a id="l01888" name="l01888"></a><span class="lineno"> 1888</span>  ssl_data = (coap_ssl_data*)BIO_get_data(SSL_get_rbio(ssl));</div>
<div class="line"><a id="l01889" name="l01889"></a><span class="lineno"> 1889</span>  <span class="keywordflow">return</span> ssl_data-&gt;timeout;</div>
<div class="line"><a id="l01890" name="l01890"></a><span class="lineno"> 1890</span>}</div>
<div class="line"><a id="l01891" name="l01891"></a><span class="lineno"> 1891</span> </div>
<div class="line"><a id="l01892" name="l01892"></a><span class="lineno"> 1892</span><span class="keywordtype">void</span> <a class="code hl_function" href="coap__notls_8c.html#aa82c602ae2c35f208900e0da83397de2">coap_dtls_handle_timeout</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01893" name="l01893"></a><span class="lineno"> 1893</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01894" name="l01894"></a><span class="lineno"> 1894</span> </div>
<div class="line"><a id="l01895" name="l01895"></a><span class="lineno"> 1895</span>  <a class="code hl_define" href="mem_8c.html#a3d4ae9c092e117c836f52dc7d7cee574">assert</a>(ssl != NULL);</div>
<div class="line"><a id="l01896" name="l01896"></a><span class="lineno"> 1896</span>  <span class="keywordflow">if</span> (((session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a382b6afaed298581b57d62aaf043cfe3">state</a> == <a class="code hl_define" href="coap__session_8h.html#a3b04568c8db8bcced69f14b813805b7f">COAP_SESSION_STATE_HANDSHAKE</a>) &amp;&amp;</div>
<div class="line"><a id="l01897" name="l01897"></a><span class="lineno"> 1897</span>       (++session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a0e449eb256836dcf5932791f53881b6e">dtls_timeout_count</a> &gt; session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a2b1cf84dfbbb313dd07afe2eba0f498b">max_retransmit</a>)) ||</div>
<div class="line"><a id="l01898" name="l01898"></a><span class="lineno"> 1898</span>      (DTLSv1_handle_timeout(ssl) &lt; 0)) {</div>
<div class="line"><a id="l01899" name="l01899"></a><span class="lineno"> 1899</span>    <span class="comment">/* Too many retries */</span></div>
<div class="line"><a id="l01900" name="l01900"></a><span class="lineno"> 1900</span>    <a class="code hl_function" href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a>(session, <a class="code hl_enumvalue" href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a>);</div>
<div class="line"><a id="l01901" name="l01901"></a><span class="lineno"> 1901</span>  }</div>
<div class="line"><a id="l01902" name="l01902"></a><span class="lineno"> 1902</span>}</div>
<div class="line"><a id="l01903" name="l01903"></a><span class="lineno"> 1903</span> </div>
<div class="line"><a id="l01904" name="l01904"></a><span class="lineno"> 1904</span><span class="keywordtype">int</span> <a class="code hl_function" href="coap__notls_8c.html#a6108ea63abb51311934ad4e2a4a8b28d">coap_dtls_hello</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session,</div>
<div class="line"><a id="l01905" name="l01905"></a><span class="lineno"> 1905</span>  <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *data, <span class="keywordtype">size_t</span> data_len) {</div>
<div class="line"><a id="l01906" name="l01906"></a><span class="lineno"> 1906</span>  coap_dtls_context_t *dtls = &amp;((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>)-&gt;dtls;</div>
<div class="line"><a id="l01907" name="l01907"></a><span class="lineno"> 1907</span>  coap_ssl_data *ssl_data;</div>
<div class="line"><a id="l01908" name="l01908"></a><span class="lineno"> 1908</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l01909" name="l01909"></a><span class="lineno"> 1909</span> </div>
<div class="line"><a id="l01910" name="l01910"></a><span class="lineno"> 1910</span>  SSL_set_mtu(dtls-&gt;ssl, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#ac126597f3f66272ed3e9c5439570e4df">mtu</a>);</div>
<div class="line"><a id="l01911" name="l01911"></a><span class="lineno"> 1911</span>  ssl_data = (coap_ssl_data*)BIO_get_data(SSL_get_rbio(dtls-&gt;ssl));</div>
<div class="line"><a id="l01912" name="l01912"></a><span class="lineno"> 1912</span>  ssl_data-&gt;session = session;</div>
<div class="line"><a id="l01913" name="l01913"></a><span class="lineno"> 1913</span>  ssl_data-&gt;pdu = data;</div>
<div class="line"><a id="l01914" name="l01914"></a><span class="lineno"> 1914</span>  ssl_data-&gt;pdu_len = (unsigned)data_len;</div>
<div class="line"><a id="l01915" name="l01915"></a><span class="lineno"> 1915</span>  r = DTLSv1_listen(dtls-&gt;ssl, dtls-&gt;bio_addr);</div>
<div class="line"><a id="l01916" name="l01916"></a><span class="lineno"> 1916</span>  <span class="keywordflow">if</span> (r &lt;= 0) {</div>
<div class="line"><a id="l01917" name="l01917"></a><span class="lineno"> 1917</span>    <span class="keywordtype">int</span> err = SSL_get_error(dtls-&gt;ssl, r);</div>
<div class="line"><a id="l01918" name="l01918"></a><span class="lineno"> 1918</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ || err == SSL_ERROR_WANT_WRITE) {</div>
<div class="line"><a id="l01919" name="l01919"></a><span class="lineno"> 1919</span>      <span class="comment">/* Got a ClientHello, sent-out a VerifyRequest */</span></div>
<div class="line"><a id="l01920" name="l01920"></a><span class="lineno"> 1920</span>      r = 0;</div>
<div class="line"><a id="l01921" name="l01921"></a><span class="lineno"> 1921</span>    }</div>
<div class="line"><a id="l01922" name="l01922"></a><span class="lineno"> 1922</span>  } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01923" name="l01923"></a><span class="lineno"> 1923</span>    <span class="comment">/* Got a valid answer to a VerifyRequest */</span></div>
<div class="line"><a id="l01924" name="l01924"></a><span class="lineno"> 1924</span>    r = 1;</div>
<div class="line"><a id="l01925" name="l01925"></a><span class="lineno"> 1925</span>  }</div>
<div class="line"><a id="l01926" name="l01926"></a><span class="lineno"> 1926</span> </div>
<div class="line"><a id="l01927" name="l01927"></a><span class="lineno"> 1927</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l01928" name="l01928"></a><span class="lineno"> 1928</span>}</div>
<div class="line"><a id="l01929" name="l01929"></a><span class="lineno"> 1929</span> </div>
<div class="line"><a id="l01930" name="l01930"></a><span class="lineno"> 1930</span><span class="keywordtype">int</span> <a class="code hl_function" href="coap__notls_8c.html#a56c73480c1bd1fa14c1727e026f82e17">coap_dtls_receive</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session,</div>
<div class="line"><a id="l01931" name="l01931"></a><span class="lineno"> 1931</span>  <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *data, <span class="keywordtype">size_t</span> data_len) {</div>
<div class="line"><a id="l01932" name="l01932"></a><span class="lineno"> 1932</span>  coap_ssl_data *ssl_data;</div>
<div class="line"><a id="l01933" name="l01933"></a><span class="lineno"> 1933</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l01934" name="l01934"></a><span class="lineno"> 1934</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l01935" name="l01935"></a><span class="lineno"> 1935</span> </div>
<div class="line"><a id="l01936" name="l01936"></a><span class="lineno"> 1936</span>  <a class="code hl_define" href="mem_8c.html#a3d4ae9c092e117c836f52dc7d7cee574">assert</a>(ssl != NULL);</div>
<div class="line"><a id="l01937" name="l01937"></a><span class="lineno"> 1937</span> </div>
<div class="line"><a id="l01938" name="l01938"></a><span class="lineno"> 1938</span>  <span class="keywordtype">int</span> in_init = SSL_in_init(ssl);</div>
<div class="line"><a id="l01939" name="l01939"></a><span class="lineno"> 1939</span>  <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> pdu[<a class="code hl_define" href="coap__io_8h.html#a4434bb4fe30115db5ed5c458be4664f5">COAP_RXBUFFER_SIZE</a>];</div>
<div class="line"><a id="l01940" name="l01940"></a><span class="lineno"> 1940</span>  ssl_data = (coap_ssl_data*)BIO_get_data(SSL_get_rbio(ssl));</div>
<div class="line"><a id="l01941" name="l01941"></a><span class="lineno"> 1941</span>  ssl_data-&gt;pdu = data;</div>
<div class="line"><a id="l01942" name="l01942"></a><span class="lineno"> 1942</span>  ssl_data-&gt;pdu_len = (unsigned)data_len;</div>
<div class="line"><a id="l01943" name="l01943"></a><span class="lineno"> 1943</span> </div>
<div class="line"><a id="l01944" name="l01944"></a><span class="lineno"> 1944</span>  session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = -1;</div>
<div class="line"><a id="l01945" name="l01945"></a><span class="lineno"> 1945</span>  r = SSL_read(ssl, pdu, (<span class="keywordtype">int</span>)<span class="keyword">sizeof</span>(pdu));</div>
<div class="line"><a id="l01946" name="l01946"></a><span class="lineno"> 1946</span>  <span class="keywordflow">if</span> (r &gt; 0) {</div>
<div class="line"><a id="l01947" name="l01947"></a><span class="lineno"> 1947</span>    <span class="keywordflow">return</span> <a class="code hl_function" href="net_8c.html#a32887948ee273d1ad464ec47df194910">coap_handle_dgram</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, session, pdu, (<span class="keywordtype">size_t</span>)r);</div>
<div class="line"><a id="l01948" name="l01948"></a><span class="lineno"> 1948</span>  } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01949" name="l01949"></a><span class="lineno"> 1949</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l01950" name="l01950"></a><span class="lineno"> 1950</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ || err == SSL_ERROR_WANT_WRITE) {</div>
<div class="line"><a id="l01951" name="l01951"></a><span class="lineno"> 1951</span>      <span class="keywordflow">if</span> (in_init &amp;&amp; SSL_is_init_finished(ssl)) {</div>
<div class="line"><a id="l01952" name="l01952"></a><span class="lineno"> 1952</span>        <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, <a class="code hl_define" href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a>, session);</div>
<div class="line"><a id="l01953" name="l01953"></a><span class="lineno"> 1953</span>        <a class="code hl_function" href="coap__session_8c.html#aa8b3a2da8480911b0216dad076038cb6">coap_session_connected</a>(session);</div>
<div class="line"><a id="l01954" name="l01954"></a><span class="lineno"> 1954</span>      }</div>
<div class="line"><a id="l01955" name="l01955"></a><span class="lineno"> 1955</span>      r = 0;</div>
<div class="line"><a id="l01956" name="l01956"></a><span class="lineno"> 1956</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l01957" name="l01957"></a><span class="lineno"> 1957</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_ZERO_RETURN)        <span class="comment">/* Got a close notify alert from the remote side */</span></div>
<div class="line"><a id="l01958" name="l01958"></a><span class="lineno"> 1958</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>;</div>
<div class="line"><a id="l01959" name="l01959"></a><span class="lineno"> 1959</span>      <span class="keywordflow">else</span> <span class="keywordflow">if</span> (err == SSL_ERROR_SSL)</div>
<div class="line"><a id="l01960" name="l01960"></a><span class="lineno"> 1960</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a>;</div>
<div class="line"><a id="l01961" name="l01961"></a><span class="lineno"> 1961</span>      r = -1;</div>
<div class="line"><a id="l01962" name="l01962"></a><span class="lineno"> 1962</span>    }</div>
<div class="line"><a id="l01963" name="l01963"></a><span class="lineno"> 1963</span>    <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> &gt;= 0) {</div>
<div class="line"><a id="l01964" name="l01964"></a><span class="lineno"> 1964</span>      <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a>, session);</div>
<div class="line"><a id="l01965" name="l01965"></a><span class="lineno"> 1965</span>      <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a> ||</div>
<div class="line"><a id="l01966" name="l01966"></a><span class="lineno"> 1966</span>          session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>) {</div>
<div class="line"><a id="l01967" name="l01967"></a><span class="lineno"> 1967</span>        <a class="code hl_function" href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a>(session, <a class="code hl_enumvalue" href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a>);</div>
<div class="line"><a id="l01968" name="l01968"></a><span class="lineno"> 1968</span>        r = -1;</div>
<div class="line"><a id="l01969" name="l01969"></a><span class="lineno"> 1969</span>      }</div>
<div class="line"><a id="l01970" name="l01970"></a><span class="lineno"> 1970</span>    }</div>
<div class="line"><a id="l01971" name="l01971"></a><span class="lineno"> 1971</span>  }</div>
<div class="line"><a id="l01972" name="l01972"></a><span class="lineno"> 1972</span> </div>
<div class="line"><a id="l01973" name="l01973"></a><span class="lineno"> 1973</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l01974" name="l01974"></a><span class="lineno"> 1974</span>}</div>
<div class="line"><a id="l01975" name="l01975"></a><span class="lineno"> 1975</span> </div>
<div class="line"><a id="l01976" name="l01976"></a><span class="lineno"> 1976</span><span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> <a class="code hl_function" href="coap__notls_8c.html#ad86e37b152d610203bfeee5513a617d8">coap_dtls_get_overhead</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l01977" name="l01977"></a><span class="lineno"> 1977</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> overhead = 37;</div>
<div class="line"><a id="l01978" name="l01978"></a><span class="lineno"> 1978</span>  <span class="keyword">const</span> SSL_CIPHER *s_ciph = NULL;</div>
<div class="line"><a id="l01979" name="l01979"></a><span class="lineno"> 1979</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a> != NULL)</div>
<div class="line"><a id="l01980" name="l01980"></a><span class="lineno"> 1980</span>    s_ciph = SSL_get_current_cipher(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>);</div>
<div class="line"><a id="l01981" name="l01981"></a><span class="lineno"> 1981</span>  <span class="keywordflow">if</span> ( s_ciph ) {</div>
<div class="line"><a id="l01982" name="l01982"></a><span class="lineno"> 1982</span>    <span class="keywordtype">unsigned</span> <span class="keywordtype">int</span> ivlen, maclen, blocksize = 1, pad = 0;</div>
<div class="line"><a id="l01983" name="l01983"></a><span class="lineno"> 1983</span> </div>
<div class="line"><a id="l01984" name="l01984"></a><span class="lineno"> 1984</span>    <span class="keyword">const</span> EVP_CIPHER *e_ciph;</div>
<div class="line"><a id="l01985" name="l01985"></a><span class="lineno"> 1985</span>    <span class="keyword">const</span> EVP_MD *e_md;</div>
<div class="line"><a id="l01986" name="l01986"></a><span class="lineno"> 1986</span>    <span class="keywordtype">char</span> cipher[128];</div>
<div class="line"><a id="l01987" name="l01987"></a><span class="lineno"> 1987</span> </div>
<div class="line"><a id="l01988" name="l01988"></a><span class="lineno"> 1988</span>    e_ciph = EVP_get_cipherbynid(SSL_CIPHER_get_cipher_nid(s_ciph));</div>
<div class="line"><a id="l01989" name="l01989"></a><span class="lineno"> 1989</span> </div>
<div class="line"><a id="l01990" name="l01990"></a><span class="lineno"> 1990</span>    <span class="keywordflow">switch</span> (EVP_CIPHER_mode(e_ciph)) {</div>
<div class="line"><a id="l01991" name="l01991"></a><span class="lineno"> 1991</span>    <span class="keywordflow">case</span> EVP_CIPH_GCM_MODE:</div>
<div class="line"><a id="l01992" name="l01992"></a><span class="lineno"> 1992</span>      ivlen = EVP_GCM_TLS_EXPLICIT_IV_LEN;</div>
<div class="line"><a id="l01993" name="l01993"></a><span class="lineno"> 1993</span>      maclen = EVP_GCM_TLS_TAG_LEN;</div>
<div class="line"><a id="l01994" name="l01994"></a><span class="lineno"> 1994</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l01995" name="l01995"></a><span class="lineno"> 1995</span> </div>
<div class="line"><a id="l01996" name="l01996"></a><span class="lineno"> 1996</span>    <span class="keywordflow">case</span> EVP_CIPH_CCM_MODE:</div>
<div class="line"><a id="l01997" name="l01997"></a><span class="lineno"> 1997</span>      ivlen = EVP_CCM_TLS_EXPLICIT_IV_LEN;</div>
<div class="line"><a id="l01998" name="l01998"></a><span class="lineno"> 1998</span>      SSL_CIPHER_description(s_ciph, cipher, <span class="keyword">sizeof</span>(cipher));</div>
<div class="line"><a id="l01999" name="l01999"></a><span class="lineno"> 1999</span>      <span class="keywordflow">if</span> (strstr(cipher, <span class="stringliteral">&quot;CCM8&quot;</span>))</div>
<div class="line"><a id="l02000" name="l02000"></a><span class="lineno"> 2000</span>        maclen = 8;</div>
<div class="line"><a id="l02001" name="l02001"></a><span class="lineno"> 2001</span>      <span class="keywordflow">else</span></div>
<div class="line"><a id="l02002" name="l02002"></a><span class="lineno"> 2002</span>        maclen = 16;</div>
<div class="line"><a id="l02003" name="l02003"></a><span class="lineno"> 2003</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l02004" name="l02004"></a><span class="lineno"> 2004</span> </div>
<div class="line"><a id="l02005" name="l02005"></a><span class="lineno"> 2005</span>    <span class="keywordflow">case</span> EVP_CIPH_CBC_MODE:</div>
<div class="line"><a id="l02006" name="l02006"></a><span class="lineno"> 2006</span>      e_md = EVP_get_digestbynid(SSL_CIPHER_get_digest_nid(s_ciph));</div>
<div class="line"><a id="l02007" name="l02007"></a><span class="lineno"> 2007</span>      blocksize = EVP_CIPHER_block_size(e_ciph);</div>
<div class="line"><a id="l02008" name="l02008"></a><span class="lineno"> 2008</span>      ivlen = EVP_CIPHER_iv_length(e_ciph);</div>
<div class="line"><a id="l02009" name="l02009"></a><span class="lineno"> 2009</span>      pad = 1;</div>
<div class="line"><a id="l02010" name="l02010"></a><span class="lineno"> 2010</span>      maclen = EVP_MD_size(e_md);</div>
<div class="line"><a id="l02011" name="l02011"></a><span class="lineno"> 2011</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l02012" name="l02012"></a><span class="lineno"> 2012</span> </div>
<div class="line"><a id="l02013" name="l02013"></a><span class="lineno"> 2013</span>    <span class="keywordflow">case</span> EVP_CIPH_STREAM_CIPHER:</div>
<div class="line"><a id="l02014" name="l02014"></a><span class="lineno"> 2014</span>      <span class="comment">/* Seen with PSK-CHACHA20-POLY1305 */</span></div>
<div class="line"><a id="l02015" name="l02015"></a><span class="lineno"> 2015</span>      ivlen = 8;</div>
<div class="line"><a id="l02016" name="l02016"></a><span class="lineno"> 2016</span>      maclen = 8;</div>
<div class="line"><a id="l02017" name="l02017"></a><span class="lineno"> 2017</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l02018" name="l02018"></a><span class="lineno"> 2018</span> </div>
<div class="line"><a id="l02019" name="l02019"></a><span class="lineno"> 2019</span>    <span class="keywordflow">default</span>:</div>
<div class="line"><a id="l02020" name="l02020"></a><span class="lineno"> 2020</span>      SSL_CIPHER_description(s_ciph, cipher, <span class="keyword">sizeof</span>(cipher));</div>
<div class="line"><a id="l02021" name="l02021"></a><span class="lineno"> 2021</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;Unknown overhead for DTLS with cipher %s\n&quot;</span>,</div>
<div class="line"><a id="l02022" name="l02022"></a><span class="lineno"> 2022</span>               cipher);</div>
<div class="line"><a id="l02023" name="l02023"></a><span class="lineno"> 2023</span>      ivlen = 8;</div>
<div class="line"><a id="l02024" name="l02024"></a><span class="lineno"> 2024</span>      maclen = 16;</div>
<div class="line"><a id="l02025" name="l02025"></a><span class="lineno"> 2025</span>      <span class="keywordflow">break</span>;</div>
<div class="line"><a id="l02026" name="l02026"></a><span class="lineno"> 2026</span>    }</div>
<div class="line"><a id="l02027" name="l02027"></a><span class="lineno"> 2027</span>    overhead = DTLS1_RT_HEADER_LENGTH + ivlen + maclen + blocksize - 1 + pad;</div>
<div class="line"><a id="l02028" name="l02028"></a><span class="lineno"> 2028</span>  }</div>
<div class="line"><a id="l02029" name="l02029"></a><span class="lineno"> 2029</span>  <span class="keywordflow">return</span> overhead;</div>
<div class="line"><a id="l02030" name="l02030"></a><span class="lineno"> 2030</span>}</div>
<div class="line"><a id="l02031" name="l02031"></a><span class="lineno"> 2031</span> </div>
<div class="line"><a id="l02032" name="l02032"></a><span class="lineno"> 2032</span><span class="keywordtype">void</span> *<a class="code hl_function" href="coap__notls_8c.html#af7d70ee719bade4e0a9c2f92b18fc2d6">coap_tls_new_client_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session, <span class="keywordtype">int</span> *connected) {</div>
<div class="line"><a id="l02033" name="l02033"></a><span class="lineno"> 2033</span>  BIO *bio = NULL;</div>
<div class="line"><a id="l02034" name="l02034"></a><span class="lineno"> 2034</span>  SSL *ssl = NULL;</div>
<div class="line"><a id="l02035" name="l02035"></a><span class="lineno"> 2035</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l02036" name="l02036"></a><span class="lineno"> 2036</span>  coap_openssl_context_t *context = ((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>);</div>
<div class="line"><a id="l02037" name="l02037"></a><span class="lineno"> 2037</span>  coap_tls_context_t *tls = &amp;context-&gt;tls;</div>
<div class="line"><a id="l02038" name="l02038"></a><span class="lineno"> 2038</span> </div>
<div class="line"><a id="l02039" name="l02039"></a><span class="lineno"> 2039</span>  *connected = 0;</div>
<div class="line"><a id="l02040" name="l02040"></a><span class="lineno"> 2040</span>  ssl = SSL_new(tls-&gt;ctx);</div>
<div class="line"><a id="l02041" name="l02041"></a><span class="lineno"> 2041</span>  <span class="keywordflow">if</span> (!ssl)</div>
<div class="line"><a id="l02042" name="l02042"></a><span class="lineno"> 2042</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02043" name="l02043"></a><span class="lineno"> 2043</span>  bio = BIO_new(tls-&gt;meth);</div>
<div class="line"><a id="l02044" name="l02044"></a><span class="lineno"> 2044</span>  <span class="keywordflow">if</span> (!bio)</div>
<div class="line"><a id="l02045" name="l02045"></a><span class="lineno"> 2045</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02046" name="l02046"></a><span class="lineno"> 2046</span>  BIO_set_data(bio, session);</div>
<div class="line"><a id="l02047" name="l02047"></a><span class="lineno"> 2047</span>  SSL_set_bio(ssl, bio, bio);</div>
<div class="line"><a id="l02048" name="l02048"></a><span class="lineno"> 2048</span>  SSL_set_app_data(ssl, session);</div>
<div class="line"><a id="l02049" name="l02049"></a><span class="lineno"> 2049</span> </div>
<div class="line"><a id="l02050" name="l02050"></a><span class="lineno"> 2050</span>  <span class="keywordflow">if</span> (!setup_client_ssl_session(session, ssl))</div>
<div class="line"><a id="l02051" name="l02051"></a><span class="lineno"> 2051</span>    <span class="keywordflow">return</span> 0;</div>
<div class="line"><a id="l02052" name="l02052"></a><span class="lineno"> 2052</span> </div>
<div class="line"><a id="l02053" name="l02053"></a><span class="lineno"> 2053</span>  r = SSL_connect(ssl);</div>
<div class="line"><a id="l02054" name="l02054"></a><span class="lineno"> 2054</span>  <span class="keywordflow">if</span> (r == -1) {</div>
<div class="line"><a id="l02055" name="l02055"></a><span class="lineno"> 2055</span>    <span class="keywordtype">int</span> ret = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l02056" name="l02056"></a><span class="lineno"> 2056</span>    <span class="keywordflow">if</span> (ret != SSL_ERROR_WANT_READ &amp;&amp; ret != SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02057" name="l02057"></a><span class="lineno"> 2057</span>      r = 0;</div>
<div class="line"><a id="l02058" name="l02058"></a><span class="lineno"> 2058</span>    <span class="keywordflow">if</span> (ret == SSL_ERROR_WANT_READ)</div>
<div class="line"><a id="l02059" name="l02059"></a><span class="lineno"> 2059</span>      session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#a72612f48f50d2b61b974ea51eae20881">COAP_SOCKET_WANT_READ</a>;</div>
<div class="line"><a id="l02060" name="l02060"></a><span class="lineno"> 2060</span>    <span class="keywordflow">if</span> (ret == SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02061" name="l02061"></a><span class="lineno"> 2061</span>      session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#ac5bc2439a8bdf2a1722708bca47eb083">COAP_SOCKET_WANT_WRITE</a>;</div>
<div class="line"><a id="l02062" name="l02062"></a><span class="lineno"> 2062</span>  }</div>
<div class="line"><a id="l02063" name="l02063"></a><span class="lineno"> 2063</span> </div>
<div class="line"><a id="l02064" name="l02064"></a><span class="lineno"> 2064</span>  <span class="keywordflow">if</span> (r == 0)</div>
<div class="line"><a id="l02065" name="l02065"></a><span class="lineno"> 2065</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02066" name="l02066"></a><span class="lineno"> 2066</span> </div>
<div class="line"><a id="l02067" name="l02067"></a><span class="lineno"> 2067</span>  *connected = SSL_is_init_finished(ssl);</div>
<div class="line"><a id="l02068" name="l02068"></a><span class="lineno"> 2068</span> </div>
<div class="line"><a id="l02069" name="l02069"></a><span class="lineno"> 2069</span>  <span class="keywordflow">return</span> ssl;</div>
<div class="line"><a id="l02070" name="l02070"></a><span class="lineno"> 2070</span> </div>
<div class="line"><a id="l02071" name="l02071"></a><span class="lineno"> 2071</span>error:</div>
<div class="line"><a id="l02072" name="l02072"></a><span class="lineno"> 2072</span>  <span class="keywordflow">if</span> (ssl)</div>
<div class="line"><a id="l02073" name="l02073"></a><span class="lineno"> 2073</span>    SSL_free(ssl);</div>
<div class="line"><a id="l02074" name="l02074"></a><span class="lineno"> 2074</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l02075" name="l02075"></a><span class="lineno"> 2075</span>}</div>
<div class="line"><a id="l02076" name="l02076"></a><span class="lineno"> 2076</span> </div>
<div class="line"><a id="l02077" name="l02077"></a><span class="lineno"> 2077</span><span class="keywordtype">void</span> *<a class="code hl_function" href="coap__notls_8c.html#afd2f2c08c1197af4d279160fb5411213">coap_tls_new_server_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session, <span class="keywordtype">int</span> *connected) {</div>
<div class="line"><a id="l02078" name="l02078"></a><span class="lineno"> 2078</span>  BIO *bio = NULL;</div>
<div class="line"><a id="l02079" name="l02079"></a><span class="lineno"> 2079</span>  SSL *ssl = NULL;</div>
<div class="line"><a id="l02080" name="l02080"></a><span class="lineno"> 2080</span>  coap_tls_context_t *tls = &amp;((coap_openssl_context_t *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">dtls_context</a>)-&gt;tls;</div>
<div class="line"><a id="l02081" name="l02081"></a><span class="lineno"> 2081</span>  <span class="keywordtype">int</span> r;</div>
<div class="line"><a id="l02082" name="l02082"></a><span class="lineno"> 2082</span> </div>
<div class="line"><a id="l02083" name="l02083"></a><span class="lineno"> 2083</span>  *connected = 0;</div>
<div class="line"><a id="l02084" name="l02084"></a><span class="lineno"> 2084</span>  ssl = SSL_new(tls-&gt;ctx);</div>
<div class="line"><a id="l02085" name="l02085"></a><span class="lineno"> 2085</span>  <span class="keywordflow">if</span> (!ssl)</div>
<div class="line"><a id="l02086" name="l02086"></a><span class="lineno"> 2086</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02087" name="l02087"></a><span class="lineno"> 2087</span>  bio = BIO_new(tls-&gt;meth);</div>
<div class="line"><a id="l02088" name="l02088"></a><span class="lineno"> 2088</span>  <span class="keywordflow">if</span> (!bio)</div>
<div class="line"><a id="l02089" name="l02089"></a><span class="lineno"> 2089</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02090" name="l02090"></a><span class="lineno"> 2090</span>  BIO_set_data(bio, session);</div>
<div class="line"><a id="l02091" name="l02091"></a><span class="lineno"> 2091</span>  SSL_set_bio(ssl, bio, bio);</div>
<div class="line"><a id="l02092" name="l02092"></a><span class="lineno"> 2092</span>  SSL_set_app_data(ssl, session);</div>
<div class="line"><a id="l02093" name="l02093"></a><span class="lineno"> 2093</span> </div>
<div class="line"><a id="l02094" name="l02094"></a><span class="lineno"> 2094</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#aca05833745124e6987489c8ecfebcb63">get_server_hint</a>) {</div>
<div class="line"><a id="l02095" name="l02095"></a><span class="lineno"> 2095</span>    <span class="keywordtype">char</span> hint[128] = <span class="stringliteral">&quot;&quot;</span>;</div>
<div class="line"><a id="l02096" name="l02096"></a><span class="lineno"> 2096</span>    <span class="keywordtype">size_t</span> hint_len = session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>-&gt;<a class="code hl_variable" href="structcoap__context__t.html#aca05833745124e6987489c8ecfebcb63">get_server_hint</a>(session, (<a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a>*)hint, <span class="keyword">sizeof</span>(hint) - 1);</div>
<div class="line"><a id="l02097" name="l02097"></a><span class="lineno"> 2097</span>    <span class="keywordflow">if</span> (hint_len &gt; 0 &amp;&amp; hint_len &lt; <span class="keyword">sizeof</span>(hint)) {</div>
<div class="line"><a id="l02098" name="l02098"></a><span class="lineno"> 2098</span>      hint[hint_len] = 0;</div>
<div class="line"><a id="l02099" name="l02099"></a><span class="lineno"> 2099</span>      SSL_use_psk_identity_hint(ssl, hint);</div>
<div class="line"><a id="l02100" name="l02100"></a><span class="lineno"> 2100</span>    }</div>
<div class="line"><a id="l02101" name="l02101"></a><span class="lineno"> 2101</span>  }</div>
<div class="line"><a id="l02102" name="l02102"></a><span class="lineno"> 2102</span> </div>
<div class="line"><a id="l02103" name="l02103"></a><span class="lineno"> 2103</span>  r = SSL_accept(ssl);</div>
<div class="line"><a id="l02104" name="l02104"></a><span class="lineno"> 2104</span>  <span class="keywordflow">if</span> (r == -1) {</div>
<div class="line"><a id="l02105" name="l02105"></a><span class="lineno"> 2105</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l02106" name="l02106"></a><span class="lineno"> 2106</span>    <span class="keywordflow">if</span> (err != SSL_ERROR_WANT_READ &amp;&amp; err != SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02107" name="l02107"></a><span class="lineno"> 2107</span>      r = 0;</div>
<div class="line"><a id="l02108" name="l02108"></a><span class="lineno"> 2108</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ)</div>
<div class="line"><a id="l02109" name="l02109"></a><span class="lineno"> 2109</span>      session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#a72612f48f50d2b61b974ea51eae20881">COAP_SOCKET_WANT_READ</a>;</div>
<div class="line"><a id="l02110" name="l02110"></a><span class="lineno"> 2110</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02111" name="l02111"></a><span class="lineno"> 2111</span>      session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#ac5bc2439a8bdf2a1722708bca47eb083">COAP_SOCKET_WANT_WRITE</a>;</div>
<div class="line"><a id="l02112" name="l02112"></a><span class="lineno"> 2112</span>  }</div>
<div class="line"><a id="l02113" name="l02113"></a><span class="lineno"> 2113</span> </div>
<div class="line"><a id="l02114" name="l02114"></a><span class="lineno"> 2114</span>  <span class="keywordflow">if</span> (r == 0)</div>
<div class="line"><a id="l02115" name="l02115"></a><span class="lineno"> 2115</span>    <span class="keywordflow">goto</span> error;</div>
<div class="line"><a id="l02116" name="l02116"></a><span class="lineno"> 2116</span> </div>
<div class="line"><a id="l02117" name="l02117"></a><span class="lineno"> 2117</span>  *connected = SSL_is_init_finished(ssl);</div>
<div class="line"><a id="l02118" name="l02118"></a><span class="lineno"> 2118</span> </div>
<div class="line"><a id="l02119" name="l02119"></a><span class="lineno"> 2119</span>  <span class="keywordflow">return</span> ssl;</div>
<div class="line"><a id="l02120" name="l02120"></a><span class="lineno"> 2120</span> </div>
<div class="line"><a id="l02121" name="l02121"></a><span class="lineno"> 2121</span>error:</div>
<div class="line"><a id="l02122" name="l02122"></a><span class="lineno"> 2122</span>  <span class="keywordflow">if</span> (ssl)</div>
<div class="line"><a id="l02123" name="l02123"></a><span class="lineno"> 2123</span>    SSL_free(ssl);</div>
<div class="line"><a id="l02124" name="l02124"></a><span class="lineno"> 2124</span>  <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a id="l02125" name="l02125"></a><span class="lineno"> 2125</span>}</div>
<div class="line"><a id="l02126" name="l02126"></a><span class="lineno"> 2126</span> </div>
<div class="line"><a id="l02127" name="l02127"></a><span class="lineno"> 2127</span><span class="keywordtype">void</span> <a class="code hl_function" href="coap__notls_8c.html#aa317934415639e23b64a3bd0b4edde6c">coap_tls_free_session</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session) {</div>
<div class="line"><a id="l02128" name="l02128"></a><span class="lineno"> 2128</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l02129" name="l02129"></a><span class="lineno"> 2129</span>  <span class="keywordflow">if</span> (ssl) {</div>
<div class="line"><a id="l02130" name="l02130"></a><span class="lineno"> 2130</span>    <span class="keywordflow">if</span> (!SSL_in_init(ssl) &amp;&amp; !(SSL_get_shutdown(ssl) &amp; SSL_SENT_SHUTDOWN)) {</div>
<div class="line"><a id="l02131" name="l02131"></a><span class="lineno"> 2131</span>      <span class="keywordtype">int</span> r = SSL_shutdown(ssl);</div>
<div class="line"><a id="l02132" name="l02132"></a><span class="lineno"> 2132</span>      <span class="keywordflow">if</span> (r == 0) r = SSL_shutdown(ssl);</div>
<div class="line"><a id="l02133" name="l02133"></a><span class="lineno"> 2133</span>    }</div>
<div class="line"><a id="l02134" name="l02134"></a><span class="lineno"> 2134</span>    SSL_free(ssl);</div>
<div class="line"><a id="l02135" name="l02135"></a><span class="lineno"> 2135</span>    session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a> = NULL;</div>
<div class="line"><a id="l02136" name="l02136"></a><span class="lineno"> 2136</span>  }</div>
<div class="line"><a id="l02137" name="l02137"></a><span class="lineno"> 2137</span>}</div>
<div class="line"><a id="l02138" name="l02138"></a><span class="lineno"> 2138</span> </div>
<div class="line"><a id="l02139" name="l02139"></a><span class="lineno"> 2139</span>ssize_t <a class="code hl_function" href="coap__notls_8c.html#adaea05db98df31bd685353eb7099f356">coap_tls_write</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session,</div>
<div class="line"><a id="l02140" name="l02140"></a><span class="lineno"> 2140</span>                       <span class="keyword">const</span> <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *data,</div>
<div class="line"><a id="l02141" name="l02141"></a><span class="lineno"> 2141</span>                       <span class="keywordtype">size_t</span> data_len</div>
<div class="line"><a id="l02142" name="l02142"></a><span class="lineno"> 2142</span>) {</div>
<div class="line"><a id="l02143" name="l02143"></a><span class="lineno"> 2143</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l02144" name="l02144"></a><span class="lineno"> 2144</span>  <span class="keywordtype">int</span> r, in_init;</div>
<div class="line"><a id="l02145" name="l02145"></a><span class="lineno"> 2145</span> </div>
<div class="line"><a id="l02146" name="l02146"></a><span class="lineno"> 2146</span>  <span class="keywordflow">if</span> (ssl == NULL)</div>
<div class="line"><a id="l02147" name="l02147"></a><span class="lineno"> 2147</span>    <span class="keywordflow">return</span> -1;</div>
<div class="line"><a id="l02148" name="l02148"></a><span class="lineno"> 2148</span> </div>
<div class="line"><a id="l02149" name="l02149"></a><span class="lineno"> 2149</span>  in_init = !SSL_is_init_finished(ssl);</div>
<div class="line"><a id="l02150" name="l02150"></a><span class="lineno"> 2150</span>  session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = -1;</div>
<div class="line"><a id="l02151" name="l02151"></a><span class="lineno"> 2151</span>  r = SSL_write(ssl, data, (<span class="keywordtype">int</span>)data_len);</div>
<div class="line"><a id="l02152" name="l02152"></a><span class="lineno"> 2152</span> </div>
<div class="line"><a id="l02153" name="l02153"></a><span class="lineno"> 2153</span>  <span class="keywordflow">if</span> (r &lt;= 0) {</div>
<div class="line"><a id="l02154" name="l02154"></a><span class="lineno"> 2154</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l02155" name="l02155"></a><span class="lineno"> 2155</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ || err == SSL_ERROR_WANT_WRITE) {</div>
<div class="line"><a id="l02156" name="l02156"></a><span class="lineno"> 2156</span>      <span class="keywordflow">if</span> (in_init &amp;&amp; SSL_is_init_finished(ssl)) {</div>
<div class="line"><a id="l02157" name="l02157"></a><span class="lineno"> 2157</span>        <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, <a class="code hl_define" href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a>, session);</div>
<div class="line"><a id="l02158" name="l02158"></a><span class="lineno"> 2158</span>        <a class="code hl_function" href="coap__session_8c.html#a2f455ec1572982a5ae404beac0cfbd53">coap_session_send_csm</a>(session);</div>
<div class="line"><a id="l02159" name="l02159"></a><span class="lineno"> 2159</span>      }</div>
<div class="line"><a id="l02160" name="l02160"></a><span class="lineno"> 2160</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ)</div>
<div class="line"><a id="l02161" name="l02161"></a><span class="lineno"> 2161</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#a72612f48f50d2b61b974ea51eae20881">COAP_SOCKET_WANT_READ</a>;</div>
<div class="line"><a id="l02162" name="l02162"></a><span class="lineno"> 2162</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02163" name="l02163"></a><span class="lineno"> 2163</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#ac5bc2439a8bdf2a1722708bca47eb083">COAP_SOCKET_WANT_WRITE</a>;</div>
<div class="line"><a id="l02164" name="l02164"></a><span class="lineno"> 2164</span>      r = 0;</div>
<div class="line"><a id="l02165" name="l02165"></a><span class="lineno"> 2165</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l02166" name="l02166"></a><span class="lineno"> 2166</span>      <a class="code hl_define" href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a>(<a class="code hl_enumvalue" href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a>, <span class="stringliteral">&quot;***%s: coap_tls_write: cannot send PDU\n&quot;</span>,</div>
<div class="line"><a id="l02167" name="l02167"></a><span class="lineno"> 2167</span>               <a class="code hl_function" href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a>(session));</div>
<div class="line"><a id="l02168" name="l02168"></a><span class="lineno"> 2168</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_ZERO_RETURN)</div>
<div class="line"><a id="l02169" name="l02169"></a><span class="lineno"> 2169</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>;</div>
<div class="line"><a id="l02170" name="l02170"></a><span class="lineno"> 2170</span>      <span class="keywordflow">else</span> <span class="keywordflow">if</span> (err == SSL_ERROR_SSL)</div>
<div class="line"><a id="l02171" name="l02171"></a><span class="lineno"> 2171</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a>;</div>
<div class="line"><a id="l02172" name="l02172"></a><span class="lineno"> 2172</span>      r = -1;</div>
<div class="line"><a id="l02173" name="l02173"></a><span class="lineno"> 2173</span>    }</div>
<div class="line"><a id="l02174" name="l02174"></a><span class="lineno"> 2174</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (in_init &amp;&amp; SSL_is_init_finished(ssl)) {</div>
<div class="line"><a id="l02175" name="l02175"></a><span class="lineno"> 2175</span>    <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, <a class="code hl_define" href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a>, session);</div>
<div class="line"><a id="l02176" name="l02176"></a><span class="lineno"> 2176</span>    <a class="code hl_function" href="coap__session_8c.html#a2f455ec1572982a5ae404beac0cfbd53">coap_session_send_csm</a>(session);</div>
<div class="line"><a id="l02177" name="l02177"></a><span class="lineno"> 2177</span>  }</div>
<div class="line"><a id="l02178" name="l02178"></a><span class="lineno"> 2178</span> </div>
<div class="line"><a id="l02179" name="l02179"></a><span class="lineno"> 2179</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> &gt;= 0) {</div>
<div class="line"><a id="l02180" name="l02180"></a><span class="lineno"> 2180</span>    <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a>, session);</div>
<div class="line"><a id="l02181" name="l02181"></a><span class="lineno"> 2181</span>    <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a> ||</div>
<div class="line"><a id="l02182" name="l02182"></a><span class="lineno"> 2182</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>) {</div>
<div class="line"><a id="l02183" name="l02183"></a><span class="lineno"> 2183</span>      <a class="code hl_function" href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a>(session, <a class="code hl_enumvalue" href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a>);</div>
<div class="line"><a id="l02184" name="l02184"></a><span class="lineno"> 2184</span>      r = -1;</div>
<div class="line"><a id="l02185" name="l02185"></a><span class="lineno"> 2185</span>    }</div>
<div class="line"><a id="l02186" name="l02186"></a><span class="lineno"> 2186</span>  }</div>
<div class="line"><a id="l02187" name="l02187"></a><span class="lineno"> 2187</span> </div>
<div class="line"><a id="l02188" name="l02188"></a><span class="lineno"> 2188</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l02189" name="l02189"></a><span class="lineno"> 2189</span>}</div>
<div class="line"><a id="l02190" name="l02190"></a><span class="lineno"> 2190</span> </div>
<div class="line"><a id="l02191" name="l02191"></a><span class="lineno"> 2191</span>ssize_t <a class="code hl_function" href="coap__notls_8c.html#a873d77ef01ab93adcec48a1b60d46d77">coap_tls_read</a>(<a class="code hl_struct" href="structcoap__session__t.html">coap_session_t</a> *session,</div>
<div class="line"><a id="l02192" name="l02192"></a><span class="lineno"> 2192</span>                      <a class="code hl_typedef" href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a> *data,</div>
<div class="line"><a id="l02193" name="l02193"></a><span class="lineno"> 2193</span>                      <span class="keywordtype">size_t</span> data_len</div>
<div class="line"><a id="l02194" name="l02194"></a><span class="lineno"> 2194</span>) {</div>
<div class="line"><a id="l02195" name="l02195"></a><span class="lineno"> 2195</span>  SSL *ssl = (SSL *)session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">tls</a>;</div>
<div class="line"><a id="l02196" name="l02196"></a><span class="lineno"> 2196</span>  <span class="keywordtype">int</span> r, in_init;</div>
<div class="line"><a id="l02197" name="l02197"></a><span class="lineno"> 2197</span> </div>
<div class="line"><a id="l02198" name="l02198"></a><span class="lineno"> 2198</span>  <span class="keywordflow">if</span> (ssl == NULL)</div>
<div class="line"><a id="l02199" name="l02199"></a><span class="lineno"> 2199</span>    <span class="keywordflow">return</span> -1;</div>
<div class="line"><a id="l02200" name="l02200"></a><span class="lineno"> 2200</span> </div>
<div class="line"><a id="l02201" name="l02201"></a><span class="lineno"> 2201</span>  in_init = !SSL_is_init_finished(ssl);</div>
<div class="line"><a id="l02202" name="l02202"></a><span class="lineno"> 2202</span>  session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = -1;</div>
<div class="line"><a id="l02203" name="l02203"></a><span class="lineno"> 2203</span>  r = SSL_read(ssl, data, (<span class="keywordtype">int</span>)data_len);</div>
<div class="line"><a id="l02204" name="l02204"></a><span class="lineno"> 2204</span>  <span class="keywordflow">if</span> (r &lt;= 0) {</div>
<div class="line"><a id="l02205" name="l02205"></a><span class="lineno"> 2205</span>    <span class="keywordtype">int</span> err = SSL_get_error(ssl, r);</div>
<div class="line"><a id="l02206" name="l02206"></a><span class="lineno"> 2206</span>    <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ || err == SSL_ERROR_WANT_WRITE) {</div>
<div class="line"><a id="l02207" name="l02207"></a><span class="lineno"> 2207</span>      <span class="keywordflow">if</span> (in_init &amp;&amp; SSL_is_init_finished(ssl)) {</div>
<div class="line"><a id="l02208" name="l02208"></a><span class="lineno"> 2208</span>        <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, <a class="code hl_define" href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a>, session);</div>
<div class="line"><a id="l02209" name="l02209"></a><span class="lineno"> 2209</span>        <a class="code hl_function" href="coap__session_8c.html#a2f455ec1572982a5ae404beac0cfbd53">coap_session_send_csm</a>(session);</div>
<div class="line"><a id="l02210" name="l02210"></a><span class="lineno"> 2210</span>      }</div>
<div class="line"><a id="l02211" name="l02211"></a><span class="lineno"> 2211</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_READ)</div>
<div class="line"><a id="l02212" name="l02212"></a><span class="lineno"> 2212</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#a72612f48f50d2b61b974ea51eae20881">COAP_SOCKET_WANT_READ</a>;</div>
<div class="line"><a id="l02213" name="l02213"></a><span class="lineno"> 2213</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_WANT_WRITE)</div>
<div class="line"><a id="l02214" name="l02214"></a><span class="lineno"> 2214</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">sock</a>.<a class="code hl_variable" href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">flags</a> |= <a class="code hl_define" href="coap__io_8h.html#ac5bc2439a8bdf2a1722708bca47eb083">COAP_SOCKET_WANT_WRITE</a>;</div>
<div class="line"><a id="l02215" name="l02215"></a><span class="lineno"> 2215</span>      r = 0;</div>
<div class="line"><a id="l02216" name="l02216"></a><span class="lineno"> 2216</span>    } <span class="keywordflow">else</span> {</div>
<div class="line"><a id="l02217" name="l02217"></a><span class="lineno"> 2217</span>      <span class="keywordflow">if</span> (err == SSL_ERROR_ZERO_RETURN)        <span class="comment">/* Got a close notify alert from the remote side */</span></div>
<div class="line"><a id="l02218" name="l02218"></a><span class="lineno"> 2218</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>;</div>
<div class="line"><a id="l02219" name="l02219"></a><span class="lineno"> 2219</span>      <span class="keywordflow">else</span> <span class="keywordflow">if</span> (err == SSL_ERROR_SSL)</div>
<div class="line"><a id="l02220" name="l02220"></a><span class="lineno"> 2220</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> = <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a>;</div>
<div class="line"><a id="l02221" name="l02221"></a><span class="lineno"> 2221</span>      r = -1;</div>
<div class="line"><a id="l02222" name="l02222"></a><span class="lineno"> 2222</span>    }</div>
<div class="line"><a id="l02223" name="l02223"></a><span class="lineno"> 2223</span>  } <span class="keywordflow">else</span> <span class="keywordflow">if</span> (in_init &amp;&amp; SSL_is_init_finished(ssl)) {</div>
<div class="line"><a id="l02224" name="l02224"></a><span class="lineno"> 2224</span>    <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, <a class="code hl_define" href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a>, session);</div>
<div class="line"><a id="l02225" name="l02225"></a><span class="lineno"> 2225</span>    <a class="code hl_function" href="coap__session_8c.html#a2f455ec1572982a5ae404beac0cfbd53">coap_session_send_csm</a>(session);</div>
<div class="line"><a id="l02226" name="l02226"></a><span class="lineno"> 2226</span>  }</div>
<div class="line"><a id="l02227" name="l02227"></a><span class="lineno"> 2227</span> </div>
<div class="line"><a id="l02228" name="l02228"></a><span class="lineno"> 2228</span>  <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> &gt;= 0) {</div>
<div class="line"><a id="l02229" name="l02229"></a><span class="lineno"> 2229</span>    <a class="code hl_function" href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a>(session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">context</a>, session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a>, session);</div>
<div class="line"><a id="l02230" name="l02230"></a><span class="lineno"> 2230</span>    <span class="keywordflow">if</span> (session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a> ||</div>
<div class="line"><a id="l02231" name="l02231"></a><span class="lineno"> 2231</span>        session-&gt;<a class="code hl_variable" href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">dtls_event</a> == <a class="code hl_define" href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a>) {</div>
<div class="line"><a id="l02232" name="l02232"></a><span class="lineno"> 2232</span>      <a class="code hl_function" href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a>(session, <a class="code hl_enumvalue" href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a>);</div>
<div class="line"><a id="l02233" name="l02233"></a><span class="lineno"> 2233</span>      r = -1;</div>
<div class="line"><a id="l02234" name="l02234"></a><span class="lineno"> 2234</span>    }</div>
<div class="line"><a id="l02235" name="l02235"></a><span class="lineno"> 2235</span>  }</div>
<div class="line"><a id="l02236" name="l02236"></a><span class="lineno"> 2236</span> </div>
<div class="line"><a id="l02237" name="l02237"></a><span class="lineno"> 2237</span>  <span class="keywordflow">return</span> r;</div>
<div class="line"><a id="l02238" name="l02238"></a><span class="lineno"> 2238</span>}</div>
<div class="line"><a id="l02239" name="l02239"></a><span class="lineno"> 2239</span> </div>
<div class="line"><a id="l02240" name="l02240"></a><span class="lineno"> 2240</span><span class="preprocessor">#else </span><span class="comment">/* !HAVE_OPENSSL */</span><span class="preprocessor"></span></div>
<div class="line"><a id="l02241" name="l02241"></a><span class="lineno"> 2241</span> </div>
<div class="line"><a id="l02242" name="l02242"></a><span class="lineno"> 2242</span><span class="preprocessor">#ifdef __clang__</span></div>
<div class="line"><a id="l02243" name="l02243"></a><span class="lineno"> 2243</span><span class="comment">/* Make compilers happy that do not like empty modules. As this function is</span></div>
<div class="line"><a id="l02244" name="l02244"></a><span class="lineno"> 2244</span><span class="comment"> * never used, we ignore -Wunused-function at the end of compiling this file</span></div>
<div class="line"><a id="l02245" name="l02245"></a><span class="lineno"> 2245</span><span class="comment"> */</span></div>
<div class="line"><a id="l02246" name="l02246"></a><span class="lineno"> 2246</span><span class="preprocessor">#pragma GCC diagnostic ignored &quot;-Wunused-function&quot;</span></div>
<div class="line"><a id="l02247" name="l02247"></a><span class="lineno"> 2247</span><span class="preprocessor">#endif</span></div>
<div class="foldopen" id="foldopen02248" data-start="{" data-end="}">
<div class="line"><a id="l02248" name="l02248"></a><span class="lineno"><a class="line" href="coap__openssl_8c.html#a546cf1db58fbb6bac12675857bc2d744"> 2248</a></span><span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> <a class="code hl_function" href="coap__openssl_8c.html#a546cf1db58fbb6bac12675857bc2d744">dummy</a>(<span class="keywordtype">void</span>) {</div>
<div class="line"><a id="l02249" name="l02249"></a><span class="lineno"> 2249</span>}</div>
</div>
<div class="line"><a id="l02250" name="l02250"></a><span class="lineno"> 2250</span> </div>
<div class="line"><a id="l02251" name="l02251"></a><span class="lineno"> 2251</span><span class="preprocessor">#endif </span><span class="comment">/* HAVE_OPENSSL */</span><span class="preprocessor"></span></div>
<div class="ttc" id="acoap__debug_8h_html"><div class="ttname"><a href="coap__debug_8h.html">coap_debug.h</a></div></div>
<div class="ttc" id="acoap__io_8c_html_a2bbd598665f98a1e2f899b475f01618b"><div class="ttname"><a href="coap__io_8c.html#a2bbd598665f98a1e2f899b475f01618b">coap_socket_read</a></div><div class="ttdeci">ssize_t coap_socket_read(coap_socket_t *sock, uint8_t *data, size_t data_len)</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8c_source.html#l00665">coap_io.c:665</a></div></div>
<div class="ttc" id="acoap__io_8c_html_a53d8fd138fc5bf331c2bf71d72ac4848"><div class="ttname"><a href="coap__io_8c.html#a53d8fd138fc5bf331c2bf71d72ac4848">coap_socket_write</a></div><div class="ttdeci">ssize_t coap_socket_write(coap_socket_t *sock, const uint8_t *data, size_t data_len)</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8c_source.html#l00635">coap_io.c:635</a></div></div>
<div class="ttc" id="acoap__io_8h_html_a4434bb4fe30115db5ed5c458be4664f5"><div class="ttname"><a href="coap__io_8h.html#a4434bb4fe30115db5ed5c458be4664f5">COAP_RXBUFFER_SIZE</a></div><div class="ttdeci">#define COAP_RXBUFFER_SIZE</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00019">coap_io.h:19</a></div></div>
<div class="ttc" id="acoap__io_8h_html_a72612f48f50d2b61b974ea51eae20881"><div class="ttname"><a href="coap__io_8h.html#a72612f48f50d2b61b974ea51eae20881">COAP_SOCKET_WANT_READ</a></div><div class="ttdeci">#define COAP_SOCKET_WANT_READ</div><div class="ttdoc">non blocking socket is waiting for reading</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00058">coap_io.h:58</a></div></div>
<div class="ttc" id="acoap__io_8h_html_a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830"><div class="ttname"><a href="coap__io_8h.html#a7ff2bb32137ca684be5539c156bdc418a60a6eebe19b2f6701ed4fcc58886d830">COAP_NACK_TLS_FAILED</a></div><div class="ttdeci">@ COAP_NACK_TLS_FAILED</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00211">coap_io.h:210</a></div></div>
<div class="ttc" id="acoap__io_8h_html_ac5bc2439a8bdf2a1722708bca47eb083"><div class="ttname"><a href="coap__io_8h.html#ac5bc2439a8bdf2a1722708bca47eb083">COAP_SOCKET_WANT_WRITE</a></div><div class="ttdeci">#define COAP_SOCKET_WANT_WRITE</div><div class="ttdoc">non blocking socket is waiting for writing</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00059">coap_io.h:59</a></div></div>
<div class="ttc" id="acoap__io_8h_html_af88ca6b7683ad462a6187ccda018f75e"><div class="ttname"><a href="coap__io_8h.html#af88ca6b7683ad462a6187ccda018f75e">COAP_SOCKET_EMPTY</a></div><div class="ttdeci">#define COAP_SOCKET_EMPTY</div><div class="ttdoc">coap_socket_flags_t values</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00054">coap_io.h:54</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a0671863eb92f2a37b1627b67564e82d4"><div class="ttname"><a href="coap__notls_8c.html#a0671863eb92f2a37b1627b67564e82d4">coap_dtls_new_context</a></div><div class="ttdeci">void * coap_dtls_new_context(struct coap_context_t *coap_context UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00086">coap_notls.c:86</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a08c2d9a091673f0488b246c1019fa7db"><div class="ttname"><a href="coap__notls_8c.html#a08c2d9a091673f0488b246c1019fa7db">coap_dtls_context_set_pki_root_cas</a></div><div class="ttdeci">int coap_dtls_context_set_pki_root_cas(struct coap_context_t *ctx UNUSED, const char *ca_file UNUSED, const char *ca_path UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00049">coap_notls.c:49</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a11ce0122c8ecc161bb42f634f5902796"><div class="ttname"><a href="coap__notls_8c.html#a11ce0122c8ecc161bb42f634f5902796">coap_dtls_new_server_session</a></div><div class="ttdeci">void * coap_dtls_new_server_session(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00094">coap_notls.c:94</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a36896a2f4100c177e129ec8a5697aa95"><div class="ttname"><a href="coap__notls_8c.html#a36896a2f4100c177e129ec8a5697aa95">coap_dtls_context_set_psk</a></div><div class="ttdeci">int coap_dtls_context_set_psk(coap_context_t *ctx UNUSED, const char *hint UNUSED, coap_dtls_role_t role UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00057">coap_notls.c:57</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a42d4e2a9f45fc8673a09da2f7bf7bfac"><div class="ttname"><a href="coap__notls_8c.html#a42d4e2a9f45fc8673a09da2f7bf7bfac">coap_dtls_get_context_timeout</a></div><div class="ttdeci">coap_tick_t coap_dtls_get_context_timeout(void *dtls_context UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00120">coap_notls.c:120</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a56c73480c1bd1fa14c1727e026f82e17"><div class="ttname"><a href="coap__notls_8c.html#a56c73480c1bd1fa14c1727e026f82e17">coap_dtls_receive</a></div><div class="ttdeci">int coap_dtls_receive(coap_session_t *session UNUSED, const uint8_t *data UNUSED, size_t data_len UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00132">coap_notls.c:132</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a6108ea63abb51311934ad4e2a4a8b28d"><div class="ttname"><a href="coap__notls_8c.html#a6108ea63abb51311934ad4e2a4a8b28d">coap_dtls_hello</a></div><div class="ttdeci">int coap_dtls_hello(coap_session_t *session UNUSED, const uint8_t *data UNUSED, size_t data_len UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00140">coap_notls.c:140</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a873d77ef01ab93adcec48a1b60d46d77"><div class="ttname"><a href="coap__notls_8c.html#a873d77ef01ab93adcec48a1b60d46d77">coap_tls_read</a></div><div class="ttdeci">ssize_t coap_tls_read(coap_session_t *session UNUSED, uint8_t *data UNUSED, size_t data_len UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00169">coap_notls.c:169</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a874aa6baedd8c5680142af7534fb4ffb"><div class="ttname"><a href="coap__notls_8c.html#a874aa6baedd8c5680142af7534fb4ffb">coap_dtls_get_timeout</a></div><div class="ttdeci">coap_tick_t coap_dtls_get_timeout(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00124">coap_notls.c:124</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a9c204e7d2d3106cfb6cf610ab4652628"><div class="ttname"><a href="coap__notls_8c.html#a9c204e7d2d3106cfb6cf610ab4652628">coap_dtls_context_check_keys_enabled</a></div><div class="ttdeci">int coap_dtls_context_check_keys_enabled(coap_context_t *ctx UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00065">coap_notls.c:65</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_a9fdcf4d222c96468f4a39b6a87ea6dd1"><div class="ttname"><a href="coap__notls_8c.html#a9fdcf4d222c96468f4a39b6a87ea6dd1">dtls_log_level</a></div><div class="ttdeci">static int dtls_log_level</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00070">coap_notls.c:70</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_aa317934415639e23b64a3bd0b4edde6c"><div class="ttname"><a href="coap__notls_8c.html#aa317934415639e23b64a3bd0b4edde6c">coap_tls_free_session</a></div><div class="ttdeci">void coap_tls_free_session(coap_session_t *coap_session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00159">coap_notls.c:159</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_aa7b1a73a52fc6f3e6e00c001363f9bfa"><div class="ttname"><a href="coap__notls_8c.html#aa7b1a73a52fc6f3e6e00c001363f9bfa">coap_dtls_session_update_mtu</a></div><div class="ttdeci">void coap_dtls_session_update_mtu(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00105">coap_notls.c:105</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_aa82c602ae2c35f208900e0da83397de2"><div class="ttname"><a href="coap__notls_8c.html#aa82c602ae2c35f208900e0da83397de2">coap_dtls_handle_timeout</a></div><div class="ttdeci">void coap_dtls_handle_timeout(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00128">coap_notls.c:128</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_aab0e2b48071ed723e10cc8f10379abca"><div class="ttname"><a href="coap__notls_8c.html#aab0e2b48071ed723e10cc8f10379abca">coap_dtls_send</a></div><div class="ttdeci">int coap_dtls_send(coap_session_t *session UNUSED, const uint8_t *data UNUSED, size_t data_len UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00109">coap_notls.c:109</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_aaf93788bf08a0459d28eaca3cafe930f"><div class="ttname"><a href="coap__notls_8c.html#aaf93788bf08a0459d28eaca3cafe930f">coap_dtls_free_session</a></div><div class="ttdeci">void coap_dtls_free_session(coap_session_t *coap_session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00102">coap_notls.c:102</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_ab6dd0798202ab0ff55fc7024e80a72d1"><div class="ttname"><a href="coap__notls_8c.html#ab6dd0798202ab0ff55fc7024e80a72d1">coap_dtls_free_context</a></div><div class="ttdeci">void coap_dtls_free_context(void *handle UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00091">coap_notls.c:91</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_abff27cfd1dfb2359351f58244f929808"><div class="ttname"><a href="coap__notls_8c.html#abff27cfd1dfb2359351f58244f929808">coap_dtls_context_set_pki</a></div><div class="ttdeci">int coap_dtls_context_set_pki(coap_context_t *ctx UNUSED, coap_dtls_pki_t *setup_data UNUSED, coap_dtls_role_t role UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00041">coap_notls.c:41</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_ad86e37b152d610203bfeee5513a617d8"><div class="ttname"><a href="coap__notls_8c.html#ad86e37b152d610203bfeee5513a617d8">coap_dtls_get_overhead</a></div><div class="ttdeci">unsigned int coap_dtls_get_overhead(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00147">coap_notls.c:147</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_adaea05db98df31bd685353eb7099f356"><div class="ttname"><a href="coap__notls_8c.html#adaea05db98df31bd685353eb7099f356">coap_tls_write</a></div><div class="ttdeci">ssize_t coap_tls_write(coap_session_t *session UNUSED, const uint8_t *data UNUSED, size_t data_len UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00162">coap_notls.c:162</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_addf5ec070e9499d36b7f2009ce736076"><div class="ttname"><a href="coap__notls_8c.html#addf5ec070e9499d36b7f2009ce736076">UNUSED</a></div><div class="ttdeci">#define UNUSED</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00019">coap_notls.c:19</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_ae4b316b8d30a716c6faeceb1cb8d9b8d"><div class="ttname"><a href="coap__notls_8c.html#ae4b316b8d30a716c6faeceb1cb8d9b8d">coap_dtls_new_client_session</a></div><div class="ttdeci">void * coap_dtls_new_client_session(coap_session_t *session UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00098">coap_notls.c:98</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_af7d70ee719bade4e0a9c2f92b18fc2d6"><div class="ttname"><a href="coap__notls_8c.html#af7d70ee719bade4e0a9c2f92b18fc2d6">coap_tls_new_client_session</a></div><div class="ttdeci">void * coap_tls_new_client_session(coap_session_t *session UNUSED, int *connected UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00151">coap_notls.c:151</a></div></div>
<div class="ttc" id="acoap__notls_8c_html_afd2f2c08c1197af4d279160fb5411213"><div class="ttname"><a href="coap__notls_8c.html#afd2f2c08c1197af4d279160fb5411213">coap_tls_new_server_session</a></div><div class="ttdeci">void * coap_tls_new_server_session(coap_session_t *session UNUSED, int *connected UNUSED)</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00155">coap_notls.c:155</a></div></div>
<div class="ttc" id="acoap__openssl_8c_html_a546cf1db58fbb6bac12675857bc2d744"><div class="ttname"><a href="coap__openssl_8c.html#a546cf1db58fbb6bac12675857bc2d744">dummy</a></div><div class="ttdeci">static void dummy(void)</div><div class="ttdef"><b>Definition</b> <a href="coap__openssl_8c_source.html#l02248">coap_openssl.c:2248</a></div></div>
<div class="ttc" id="acoap__session_8c_html_a2f455ec1572982a5ae404beac0cfbd53"><div class="ttname"><a href="coap__session_8c.html#a2f455ec1572982a5ae404beac0cfbd53">coap_session_send_csm</a></div><div class="ttdeci">void coap_session_send_csm(coap_session_t *session)</div><div class="ttdoc">Notify session transport has just connected and CSM exchange can now start.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8c_source.html#l00290">coap_session.c:290</a></div></div>
<div class="ttc" id="acoap__session_8c_html_a43ad12697cacde3be9579f8253ca9ccf"><div class="ttname"><a href="coap__session_8c.html#a43ad12697cacde3be9579f8253ca9ccf">coap_session_send</a></div><div class="ttdeci">ssize_t coap_session_send(coap_session_t *session, const uint8_t *data, size_t datalen)</div><div class="ttdoc">Function interface for datagram data transmission.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8c_source.html#l00218">coap_session.c:218</a></div></div>
<div class="ttc" id="acoap__session_8c_html_aa8b3a2da8480911b0216dad076038cb6"><div class="ttname"><a href="coap__session_8c.html#aa8b3a2da8480911b0216dad076038cb6">coap_session_connected</a></div><div class="ttdeci">void coap_session_connected(coap_session_t *session)</div><div class="ttdoc">Notify session that it has just connected or reconnected.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8c_source.html#l00326">coap_session.c:326</a></div></div>
<div class="ttc" id="acoap__session_8c_html_ad3377d3198c10fa086502035ded9c268"><div class="ttname"><a href="coap__session_8c.html#ad3377d3198c10fa086502035ded9c268">coap_session_disconnected</a></div><div class="ttdeci">void coap_session_disconnected(coap_session_t *session, coap_nack_reason_t reason)</div><div class="ttdoc">Notify session that it has failed.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8c_source.html#l00383">coap_session.c:383</a></div></div>
<div class="ttc" id="acoap__session_8h_html_a3b04568c8db8bcced69f14b813805b7f"><div class="ttname"><a href="coap__session_8h.html#a3b04568c8db8bcced69f14b813805b7f">COAP_SESSION_STATE_HANDSHAKE</a></div><div class="ttdeci">#define COAP_SESSION_STATE_HANDSHAKE</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00052">coap_session.h:52</a></div></div>
<div class="ttc" id="agroup__clock_html_ga0e2d5d4667e8b7a44c375cdb378b8d1b"><div class="ttname"><a href="group__clock.html#ga0e2d5d4667e8b7a44c375cdb378b8d1b">coap_ticks_from_rt_us</a></div><div class="ttdeci">coap_tick_t coap_ticks_from_rt_us(uint64_t t)</div><div class="ttdoc">Helper function that converts POSIX wallclock time in us to coap ticks.</div></div>
<div class="ttc" id="agroup__clock_html_ga97ff1502e211b4ee6c3f15a598833438"><div class="ttname"><a href="group__clock.html#ga97ff1502e211b4ee6c3f15a598833438">coap_tick_t</a></div><div class="ttdeci">uint64_t coap_tick_t</div><div class="ttdoc">This data type represents internal timer ticks with COAP_TICKS_PER_SECOND resolution.</div><div class="ttdef"><b>Definition</b> <a href="coap__time_8h_source.html#l00085">coap_time.h:85</a></div></div>
<div class="ttc" id="agroup__dtls__internal_html_ga1e81d904e13ccf3af6a56ab3ebdc8a34"><div class="ttname"><a href="group__dtls__internal.html#ga1e81d904e13ccf3af6a56ab3ebdc8a34">coap_dtls_startup</a></div><div class="ttdeci">void coap_dtls_startup(void)</div><div class="ttdoc">Initialize the underlying (D)TLS Library layer.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00072">coap_notls.c:72</a></div></div>
<div class="ttc" id="agroup__dtls__internal_html_ga4dbea8aa6943bcf865990b5cebb6bfa4"><div class="ttname"><a href="group__dtls__internal.html#ga4dbea8aa6943bcf865990b5cebb6bfa4">coap_dtls_role_t</a></div><div class="ttdeci">coap_dtls_role_t</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00264">coap_dtls.h:264</a></div></div>
<div class="ttc" id="agroup__dtls__internal_html_ga7954de23333db4fdc4043c35022e49f5"><div class="ttname"><a href="group__dtls__internal.html#ga7954de23333db4fdc4043c35022e49f5">coap_dtls_is_context_timeout</a></div><div class="ttdeci">int coap_dtls_is_context_timeout(void)</div><div class="ttdoc">Check if timeout is handled per CoAP session or per CoAP context.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00116">coap_notls.c:116</a></div></div>
<div class="ttc" id="agroup__dtls__internal_html_gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da"><div class="ttname"><a href="group__dtls__internal.html#gga4dbea8aa6943bcf865990b5cebb6bfa4a07db1c396fbda1115124a22b3b9cb4da">COAP_DTLS_ROLE_SERVER</a></div><div class="ttdeci">@ COAP_DTLS_ROLE_SERVER</div><div class="ttdoc">Internal function invoked for server.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00267">coap_dtls.h:266</a></div></div>
<div class="ttc" id="agroup__dtls_html_ga30c05cbcf1ca5320ff0349b59f8c7fcb"><div class="ttname"><a href="group__dtls.html#ga30c05cbcf1ca5320ff0349b59f8c7fcb">coap_get_tls_library_version</a></div><div class="ttdeci">coap_tls_version_t * coap_get_tls_library_version(void)</div><div class="ttdoc">Determine the type and version of the underlying (D)TLS library.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00033">coap_notls.c:33</a></div></div>
<div class="ttc" id="agroup__dtls_html_ga55b3b545f0784c7a6135021017317e1b"><div class="ttname"><a href="group__dtls.html#ga55b3b545f0784c7a6135021017317e1b">coap_tls_is_supported</a></div><div class="ttdeci">int coap_tls_is_supported(void)</div><div class="ttdoc">Check whether TLS is available.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00028">coap_notls.c:28</a></div></div>
<div class="ttc" id="agroup__dtls_html_ga6de1714f227765ef908b1ab865f77f18"><div class="ttname"><a href="group__dtls.html#ga6de1714f227765ef908b1ab865f77f18">COAP_TLS_LIBRARY_OPENSSL</a></div><div class="ttdeci">#define COAP_TLS_LIBRARY_OPENSSL</div><div class="ttdoc">Using OpenSSL library.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00040">coap_dtls.h:40</a></div></div>
<div class="ttc" id="agroup__dtls_html_ga9def28dc6da3b77c14e89d63769ec085"><div class="ttname"><a href="group__dtls.html#ga9def28dc6da3b77c14e89d63769ec085">coap_dtls_is_supported</a></div><div class="ttdeci">int coap_dtls_is_supported(void)</div><div class="ttdoc">Check whether DTLS is available.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00023">coap_notls.c:23</a></div></div>
<div class="ttc" id="agroup__dtls_html_gga8b3c5ffa695a8bfa575319a39517f980a5685869e9efbf03fe4d05120ff810aef"><div class="ttname"><a href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980a5685869e9efbf03fe4d05120ff810aef">COAP_PKI_KEY_PEM</a></div><div class="ttdeci">@ COAP_PKI_KEY_PEM</div><div class="ttdoc">The PKI key type is PEM.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00132">coap_dtls.h:132</a></div></div>
<div class="ttc" id="agroup__dtls_html_gga8b3c5ffa695a8bfa575319a39517f980ad1bd86830b59058a381a07865bddd3b7"><div class="ttname"><a href="group__dtls.html#gga8b3c5ffa695a8bfa575319a39517f980ad1bd86830b59058a381a07865bddd3b7">COAP_PKI_KEY_ASN1</a></div><div class="ttdeci">@ COAP_PKI_KEY_ASN1</div><div class="ttdoc">The PKI key type is ASN.1 (DER)</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00133">coap_dtls.h:133</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a05caf595fe597cf31b86e61e4dc21fe5"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a05caf595fe597cf31b86e61e4dc21fe5">COAP_ASN1_PKEY_DH</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DH</div><div class="ttdoc">DH type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00119">coap_dtls.h:119</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a0d8b252581daca277bbc4aa490a6cc01"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a0d8b252581daca277bbc4aa490a6cc01">COAP_ASN1_PKEY_NONE</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_NONE</div><div class="ttdoc">NONE.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00111">coap_dtls.h:111</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a17174dc07690f17fc0fd223c76bb25dc"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a17174dc07690f17fc0fd223c76bb25dc">COAP_ASN1_PKEY_TLS1_PRF</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_TLS1_PRF</div><div class="ttdoc">TLS1_PRF type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00124">coap_dtls.h:124</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a190dcef2ec78de18ce08555d285c40b7"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a190dcef2ec78de18ce08555d285c40b7">COAP_ASN1_PKEY_RSA2</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_RSA2</div><div class="ttdoc">RSA2 type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00113">coap_dtls.h:113</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a195328aaae1102658ebf3a9bd6d8c027"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a195328aaae1102658ebf3a9bd6d8c027">COAP_ASN1_PKEY_DSA</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DSA</div><div class="ttdoc">DSA type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00114">coap_dtls.h:114</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a32fec5facd159d2c9ca9d00cd9fb904a"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a32fec5facd159d2c9ca9d00cd9fb904a">COAP_ASN1_PKEY_DHX</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DHX</div><div class="ttdoc">DHX type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00120">coap_dtls.h:120</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a4d2b14a573ffb6194d1ba2789e831de2"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a4d2b14a573ffb6194d1ba2789e831de2">COAP_ASN1_PKEY_DSA4</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DSA4</div><div class="ttdoc">DSA4 type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00118">coap_dtls.h:118</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a5d86ada626fc1b778eabec59952bec4d"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a5d86ada626fc1b778eabec59952bec4d">COAP_ASN1_PKEY_DSA2</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DSA2</div><div class="ttdoc">DSA2 type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00116">coap_dtls.h:116</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a815f6139ef4796dc825afc72871b1425"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a815f6139ef4796dc825afc72871b1425">COAP_ASN1_PKEY_RSA</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_RSA</div><div class="ttdoc">RSA type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00112">coap_dtls.h:112</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a888108396b26f167f26e8a293e7c44e7"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a888108396b26f167f26e8a293e7c44e7">COAP_ASN1_PKEY_DSA1</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DSA1</div><div class="ttdoc">DSA1 type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00115">coap_dtls.h:115</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069a8f0d588891e977c023bcf6de079dc893"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069a8f0d588891e977c023bcf6de079dc893">COAP_ASN1_PKEY_HKDF</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_HKDF</div><div class="ttdoc">HKDF type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00126">coap_dtls.h:125</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069abeca018329efa3c03150aac3ba058c33"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069abeca018329efa3c03150aac3ba058c33">COAP_ASN1_PKEY_EC</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_EC</div><div class="ttdoc">EC type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00121">coap_dtls.h:121</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069ac6a7ddf9cabc5273bb9a69de5e6971be"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ac6a7ddf9cabc5273bb9a69de5e6971be">COAP_ASN1_PKEY_DSA3</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_DSA3</div><div class="ttdoc">DSA3 type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00117">coap_dtls.h:117</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069ae0e54b44eb5c901d76ddca601e46bda0"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ae0e54b44eb5c901d76ddca601e46bda0">COAP_ASN1_PKEY_HMAC</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_HMAC</div><div class="ttdoc">HMAC type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00122">coap_dtls.h:122</a></div></div>
<div class="ttc" id="agroup__dtls_html_ggacf1b8685e693c4c5fafe2d4d207c2069ae170f1e0d7ec889322b1589b2a9f9923"><div class="ttname"><a href="group__dtls.html#ggacf1b8685e693c4c5fafe2d4d207c2069ae170f1e0d7ec889322b1589b2a9f9923">COAP_ASN1_PKEY_CMAC</a></div><div class="ttdeci">@ COAP_ASN1_PKEY_CMAC</div><div class="ttdoc">CMAC type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00123">coap_dtls.h:123</a></div></div>
<div class="ttc" id="agroup__events_html_ga367c24eff1326e0e3f8bd1d7dcd5363a"><div class="ttname"><a href="group__events.html#ga367c24eff1326e0e3f8bd1d7dcd5363a">COAP_EVENT_DTLS_RENEGOTIATE</a></div><div class="ttdeci">#define COAP_EVENT_DTLS_RENEGOTIATE</div><div class="ttdef"><b>Definition</b> <a href="coap__event_8h_source.html#l00035">coap_event.h:35</a></div></div>
<div class="ttc" id="agroup__events_html_ga4b7987047870eb07d52a9bb7a04b04ad"><div class="ttname"><a href="group__events.html#ga4b7987047870eb07d52a9bb7a04b04ad">COAP_EVENT_DTLS_ERROR</a></div><div class="ttdeci">#define COAP_EVENT_DTLS_ERROR</div><div class="ttdef"><b>Definition</b> <a href="coap__event_8h_source.html#l00036">coap_event.h:36</a></div></div>
<div class="ttc" id="agroup__events_html_ga58978fec0cb0a118e2e47b3eb9b5efdc"><div class="ttname"><a href="group__events.html#ga58978fec0cb0a118e2e47b3eb9b5efdc">COAP_EVENT_DTLS_CLOSED</a></div><div class="ttdeci">#define COAP_EVENT_DTLS_CLOSED</div><div class="ttdoc">(D)TLS events for COAP_PROTO_DTLS and COAP_PROTO_TLS</div><div class="ttdef"><b>Definition</b> <a href="coap__event_8h_source.html#l00033">coap_event.h:33</a></div></div>
<div class="ttc" id="agroup__events_html_gaeedad13a6a9e652948097bb1f8290229"><div class="ttname"><a href="group__events.html#gaeedad13a6a9e652948097bb1f8290229">COAP_EVENT_DTLS_CONNECTED</a></div><div class="ttdeci">#define COAP_EVENT_DTLS_CONNECTED</div><div class="ttdef"><b>Definition</b> <a href="coap__event_8h_source.html#l00034">coap_event.h:34</a></div></div>
<div class="ttc" id="agroup__logging_html_ga2ed215efb94dd270a6d55fb274f62b52"><div class="ttname"><a href="group__logging.html#ga2ed215efb94dd270a6d55fb274f62b52">coap_dtls_set_log_level</a></div><div class="ttdeci">void coap_dtls_set_log_level(int level)</div><div class="ttdoc">Sets the (D)TLS logging level to the specified level.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00076">coap_notls.c:76</a></div></div>
<div class="ttc" id="agroup__logging_html_gaa57b34084a2baf0b83e7ffea5653ea25"><div class="ttname"><a href="group__logging.html#gaa57b34084a2baf0b83e7ffea5653ea25">coap_dtls_get_log_level</a></div><div class="ttdeci">int coap_dtls_get_log_level(void)</div><div class="ttdoc">Get the current (D)TLS logging.</div><div class="ttdef"><b>Definition</b> <a href="coap__notls_8c_source.html#l00081">coap_notls.c:81</a></div></div>
<div class="ttc" id="agroup__logging_html_gabf09c67f27059ca278900e7e8fdd475e"><div class="ttname"><a href="group__logging.html#gabf09c67f27059ca278900e7e8fdd475e">coap_session_str</a></div><div class="ttdeci">const char * coap_session_str(const coap_session_t *session)</div><div class="ttdoc">Get session description.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8c_source.html#l00943">coap_session.c:943</a></div></div>
<div class="ttc" id="agroup__logging_html_gaff2785484e756c8ec2fce408f9b81f0f"><div class="ttname"><a href="group__logging.html#gaff2785484e756c8ec2fce408f9b81f0f">coap_log</a></div><div class="ttdeci">#define coap_log(level,...)</div><div class="ttdoc">Logging function.</div><div class="ttdef"><b>Definition</b> <a href="coap__debug_8h_source.html#l00122">coap_debug.h:122</a></div></div>
<div class="ttc" id="agroup__logging_html_gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c"><div class="ttname"><a href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a0b4d9ad891dde7ae8deeb1704195858c">LOG_ERR</a></div><div class="ttdeci">@ LOG_ERR</div><div class="ttdoc">Error.</div><div class="ttdef"><b>Definition</b> <a href="coap__debug_8h_source.html#l00045">coap_debug.h:45</a></div></div>
<div class="ttc" id="agroup__logging_html_gga53c7b97a7af4d62d8c1678d658cc7446a6e98ff471e3ce6c4ef2d75c37ee51837"><div class="ttname"><a href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a6e98ff471e3ce6c4ef2d75c37ee51837">LOG_INFO</a></div><div class="ttdeci">@ LOG_INFO</div><div class="ttdoc">Information.</div><div class="ttdef"><b>Definition</b> <a href="coap__debug_8h_source.html#l00048">coap_debug.h:48</a></div></div>
<div class="ttc" id="agroup__logging_html_gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400"><div class="ttname"><a href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446a8f6fe15bfe15104da6d1b360194a5400">LOG_WARNING</a></div><div class="ttdeci">@ LOG_WARNING</div><div class="ttdoc">Warning.</div><div class="ttdef"><b>Definition</b> <a href="coap__debug_8h_source.html#l00046">coap_debug.h:46</a></div></div>
<div class="ttc" id="agroup__logging_html_gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e"><div class="ttname"><a href="group__logging.html#gga53c7b97a7af4d62d8c1678d658cc7446ab9f002c6ffbfd511da8090213227454e">LOG_DEBUG</a></div><div class="ttdeci">@ LOG_DEBUG</div><div class="ttdoc">Debug.</div><div class="ttdef"><b>Definition</b> <a href="coap__debug_8h_source.html#l00050">coap_debug.h:49</a></div></div>
<div class="ttc" id="agroup__prng_html_ga7c7d6401e43c811dacb517d51184c873"><div class="ttname"><a href="group__prng.html#ga7c7d6401e43c811dacb517d51184c873">prng</a></div><div class="ttdeci">#define prng(Buf, Length)</div><div class="ttdoc">Fills Buf with Length bytes of random data.</div><div class="ttdef"><b>Definition</b> <a href="prng_8h_source.html#l00112">prng.h:112</a></div></div>
<div class="ttc" id="amem_8c_html_a3d4ae9c092e117c836f52dc7d7cee574"><div class="ttname"><a href="mem_8c.html#a3d4ae9c092e117c836f52dc7d7cee574">assert</a></div><div class="ttdeci">#define assert(...)</div><div class="ttdef"><b>Definition</b> <a href="mem_8c_source.html#l00018">mem.c:18</a></div></div>
<div class="ttc" id="amem_8h_html"><div class="ttname"><a href="mem_8h.html">mem.h</a></div></div>
<div class="ttc" id="amem_8h_html_a1e46a1505bb13f03fdacd5d1b32502a6"><div class="ttname"><a href="mem_8h.html#a1e46a1505bb13f03fdacd5d1b32502a6">coap_free</a></div><div class="ttdeci">COAP_STATIC_INLINE void coap_free(void *object)</div><div class="ttdoc">Wrapper function to coap_free_type() for backwards compatibility.</div><div class="ttdef"><b>Definition</b> <a href="mem_8h_source.html#l00082">mem.h:82</a></div></div>
<div class="ttc" id="amem_8h_html_a26f40acd710e6c964242c2e0cd789375"><div class="ttname"><a href="mem_8h.html#a26f40acd710e6c964242c2e0cd789375">coap_malloc</a></div><div class="ttdeci">COAP_STATIC_INLINE void * coap_malloc(size_t size)</div><div class="ttdoc">Wrapper function to coap_malloc_type() for backwards compatibility.</div><div class="ttdef"><b>Definition</b> <a href="mem_8h_source.html#l00075">mem.h:75</a></div></div>
<div class="ttc" id="anet_8c_html_a32887948ee273d1ad464ec47df194910"><div class="ttname"><a href="net_8c.html#a32887948ee273d1ad464ec47df194910">coap_handle_dgram</a></div><div class="ttdeci">int coap_handle_dgram(coap_context_t *ctx, coap_session_t *session, uint8_t *msg, size_t msg_len)</div><div class="ttdoc">Parses and interprets a CoAP datagram with context ctx.</div><div class="ttdef"><b>Definition</b> <a href="net_8c_source.html#l01369">net.c:1369</a></div></div>
<div class="ttc" id="anet_8c_html_a5e2cee998ccf618ac07aa54f5e5f8743"><div class="ttname"><a href="net_8c.html#a5e2cee998ccf618ac07aa54f5e5f8743">coap_handle_event</a></div><div class="ttdeci">int coap_handle_event(coap_context_t *context, coap_event_t event, coap_session_t *session)</div><div class="ttdoc">Invokes the event handler of context for the given event and data.</div><div class="ttdef"><b>Definition</b> <a href="net_8c_source.html#l02310">net.c:2310</a></div></div>
<div class="ttc" id="anet_8h_html"><div class="ttname"><a href="net_8h.html">net.h</a></div></div>
<div class="ttc" id="apdu_8h_html_a6c9a1dd7b311e5a420e3a7c36b918a02"><div class="ttname"><a href="pdu_8h.html#a6c9a1dd7b311e5a420e3a7c36b918a02">COAP_PROTO_TLS</a></div><div class="ttdeci">#define COAP_PROTO_TLS</div><div class="ttdef"><b>Definition</b> <a href="pdu_8h_source.html#l00345">pdu.h:345</a></div></div>
<div class="ttc" id="apdu_8h_html_ac10ea7ae66e5e549b47854417311b560"><div class="ttname"><a href="pdu_8h.html#ac10ea7ae66e5e549b47854417311b560">COAP_PROTO_DTLS</a></div><div class="ttdeci">#define COAP_PROTO_DTLS</div><div class="ttdef"><b>Definition</b> <a href="pdu_8h_source.html#l00343">pdu.h:343</a></div></div>
<div class="ttc" id="apdu_8h_html_acd9e29989066f01c6951113d951cd158"><div class="ttname"><a href="pdu_8h.html#acd9e29989066f01c6951113d951cd158">COAP_DEFAULT_MTU</a></div><div class="ttdeci">#define COAP_DEFAULT_MTU</div><div class="ttdef"><b>Definition</b> <a href="pdu_8h_source.html#l00032">pdu.h:32</a></div></div>
<div class="ttc" id="aprng_8h_html"><div class="ttname"><a href="prng_8h.html">prng.h</a></div><div class="ttdoc">Pseudo Random Numbers.</div></div>
<div class="ttc" id="astructcoap__context__t_html"><div class="ttname"><a href="structcoap__context__t.html">coap_context_t</a></div><div class="ttdoc">The CoAP stack's global state is stored in a coap_context_t object.</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00148">net.h:148</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_a71aa494865b061f72ec0ecd633aa4e7f"><div class="ttname"><a href="structcoap__context__t.html#a71aa494865b061f72ec0ecd633aa4e7f">coap_context_t::get_server_psk</a></div><div class="ttdeci">size_t(* get_server_psk)(const coap_session_t *session, const uint8_t *identity, size_t identity_len, uint8_t *psk, size_t max_psk_len)</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00204">net.h:204</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_a85e2737b90beb8afce13a6ef2bea87f4"><div class="ttname"><a href="structcoap__context__t.html#a85e2737b90beb8afce13a6ef2bea87f4">coap_context_t::dtls_context</a></div><div class="ttdeci">void * dtls_context</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00207">net.h:207</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_ab12d8e6ea4ec3ec2f196bd088d280f81"><div class="ttname"><a href="structcoap__context__t.html#ab12d8e6ea4ec3ec2f196bd088d280f81">coap_context_t::psk_key</a></div><div class="ttdeci">uint8_t * psk_key</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00210">net.h:210</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_aca05833745124e6987489c8ecfebcb63"><div class="ttname"><a href="structcoap__context__t.html#aca05833745124e6987489c8ecfebcb63">coap_context_t::get_server_hint</a></div><div class="ttdeci">size_t(* get_server_hint)(const coap_session_t *session, uint8_t *hint, size_t max_hint_len)</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00205">net.h:205</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_ae412c9932b9ced3c778d6029d21493c7"><div class="ttname"><a href="structcoap__context__t.html#ae412c9932b9ced3c778d6029d21493c7">coap_context_t::get_client_psk</a></div><div class="ttdeci">size_t(* get_client_psk)(const coap_session_t *session, const uint8_t *hint, size_t hint_len, uint8_t *identity, size_t *identity_len, size_t max_identity_len, uint8_t *psk, size_t max_psk_len)</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00203">net.h:203</a></div></div>
<div class="ttc" id="astructcoap__context__t_html_af2e8cc51d43707399bf19226afca7cd4"><div class="ttname"><a href="structcoap__context__t.html#af2e8cc51d43707399bf19226afca7cd4">coap_context_t::psk_key_len</a></div><div class="ttdeci">size_t psk_key_len</div><div class="ttdef"><b>Definition</b> <a href="net_8h_source.html#l00211">net.h:211</a></div></div>
<div class="ttc" id="astructcoap__dtls__key__t_html"><div class="ttname"><a href="structcoap__dtls__key__t.html">coap_dtls_key_t</a></div><div class="ttdoc">The structure that holds the PKI key information.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00161">coap_dtls.h:161</a></div></div>
<div class="ttc" id="astructcoap__dtls__key__t_html_a3ef67cd1eeaef460cc19c00bcabeb617"><div class="ttname"><a href="structcoap__dtls__key__t.html#a3ef67cd1eeaef460cc19c00bcabeb617">coap_dtls_key_t::pem</a></div><div class="ttdeci">coap_pki_key_pem_t pem</div><div class="ttdoc">for PEM keys</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00164">coap_dtls.h:164</a></div></div>
<div class="ttc" id="astructcoap__dtls__key__t_html_a975d3154f696292646d0ba1d8d613001"><div class="ttname"><a href="structcoap__dtls__key__t.html#a975d3154f696292646d0ba1d8d613001">coap_dtls_key_t::key</a></div><div class="ttdeci">union coap_dtls_key_t::@1 key</div></div>
<div class="ttc" id="astructcoap__dtls__key__t_html_aa241aa8d0dc8c425ddf97bf869f65abc"><div class="ttname"><a href="structcoap__dtls__key__t.html#aa241aa8d0dc8c425ddf97bf869f65abc">coap_dtls_key_t::key_type</a></div><div class="ttdeci">coap_pki_key_t key_type</div><div class="ttdoc">key format type</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00162">coap_dtls.h:162</a></div></div>
<div class="ttc" id="astructcoap__dtls__key__t_html_abf2a9f92eb9c30895e7ac7a6fb8cac78"><div class="ttname"><a href="structcoap__dtls__key__t.html#abf2a9f92eb9c30895e7ac7a6fb8cac78">coap_dtls_key_t::asn1</a></div><div class="ttdeci">coap_pki_key_asn1_t asn1</div><div class="ttdoc">for ASN.1 (DER) keys</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00165">coap_dtls.h:165</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html"><div class="ttname"><a href="structcoap__dtls__pki__t.html">coap_dtls_pki_t</a></div><div class="ttdoc">The structure used for defining the PKI setup data to be used.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00191">coap_dtls.h:191</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a1125f0a08bf12be0a1a0cb63a4f3f2af"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a1125f0a08bf12be0a1a0cb63a4f3f2af">coap_dtls_pki_t::allow_no_crl</a></div><div class="ttdeci">uint8_t allow_no_crl</div><div class="ttdoc">1 ignore if CRL not there</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00202">coap_dtls.h:202</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a16fb73f2ceb8aafed7256cdf9ffec8f6"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a16fb73f2ceb8aafed7256cdf9ffec8f6">coap_dtls_pki_t::cn_call_back_arg</a></div><div class="ttdeci">void * cn_call_back_arg</div><div class="ttdoc">Passed in to the CN call-back function.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00219">coap_dtls.h:219</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a1e82f78f5b4b930eb2cee687adbcb455"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a1e82f78f5b4b930eb2cee687adbcb455">coap_dtls_pki_t::require_peer_cert</a></div><div class="ttdeci">uint8_t require_peer_cert</div><div class="ttdoc">1 if peer cert is required</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00196">coap_dtls.h:196</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a3f0ebaa3461576eee13f74ea5a362247"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a3f0ebaa3461576eee13f74ea5a362247">coap_dtls_pki_t::cert_chain_validation</a></div><div class="ttdeci">uint8_t cert_chain_validation</div><div class="ttdoc">1 if to check cert_chain_verify_depth</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00199">coap_dtls.h:199</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a6651ec064838213f18f49c6044cc7b4f"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a6651ec064838213f18f49c6044cc7b4f">coap_dtls_pki_t::check_cert_revocation</a></div><div class="ttdeci">uint8_t check_cert_revocation</div><div class="ttdoc">1 if revocation checks wanted</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00201">coap_dtls.h:201</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a85209ca6aa358e45b4b065b0c39dd360"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a85209ca6aa358e45b4b065b0c39dd360">coap_dtls_pki_t::cert_chain_verify_depth</a></div><div class="ttdeci">uint8_t cert_chain_verify_depth</div><div class="ttdoc">recommended depth is 3</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00200">coap_dtls.h:200</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_a9e4bb23daf38e695b1fa7b7fddd0072d"><div class="ttname"><a href="structcoap__dtls__pki__t.html#a9e4bb23daf38e695b1fa7b7fddd0072d">coap_dtls_pki_t::additional_tls_setup_call_back</a></div><div class="ttdeci">coap_dtls_security_setup_t additional_tls_setup_call_back</div><div class="ttdoc">Additional Security call-back handler that is invoked when libcoap has done the standerd,...</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00234">coap_dtls.h:234</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_aa92df455480e1ce202d48fbac3ee5422"><div class="ttname"><a href="structcoap__dtls__pki__t.html#aa92df455480e1ce202d48fbac3ee5422">coap_dtls_pki_t::allow_expired_certs</a></div><div class="ttdeci">uint8_t allow_expired_certs</div><div class="ttdoc">1 if expired certs are allowed</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00198">coap_dtls.h:198</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_aac00e49483212c37c25435f03a6a6cb6"><div class="ttname"><a href="structcoap__dtls__pki__t.html#aac00e49483212c37c25435f03a6a6cb6">coap_dtls_pki_t::verify_peer_cert</a></div><div class="ttdeci">uint8_t verify_peer_cert</div><div class="ttdoc">Set to 1 to support this version of the struct.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00195">coap_dtls.h:195</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_abcd4a892d8823201b52597b702e70348"><div class="ttname"><a href="structcoap__dtls__pki__t.html#abcd4a892d8823201b52597b702e70348">coap_dtls_pki_t::client_sni</a></div><div class="ttdeci">char * client_sni</div><div class="ttdoc">If not NULL, SNI to use in client TLS setup.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00236">coap_dtls.h:236</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_ad078b00881086bb7425187f2e7de90ab"><div class="ttname"><a href="structcoap__dtls__pki__t.html#ad078b00881086bb7425187f2e7de90ab">coap_dtls_pki_t::validate_sni_call_back</a></div><div class="ttdeci">coap_dtls_sni_callback_t validate_sni_call_back</div><div class="ttdoc">SNI check call-back function.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00226">coap_dtls.h:226</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_ad125a6d4424f2603a9ff9df7338fd312"><div class="ttname"><a href="structcoap__dtls__pki__t.html#ad125a6d4424f2603a9ff9df7338fd312">coap_dtls_pki_t::allow_self_signed</a></div><div class="ttdeci">uint8_t allow_self_signed</div><div class="ttdoc">1 if self signed certs are allowed</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00197">coap_dtls.h:197</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_add86314537669f49fca148651fbf842e"><div class="ttname"><a href="structcoap__dtls__pki__t.html#add86314537669f49fca148651fbf842e">coap_dtls_pki_t::sni_call_back_arg</a></div><div class="ttdeci">void * sni_call_back_arg</div><div class="ttdoc">Passed in to the sni call-back function.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00227">coap_dtls.h:227</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_ae136f22847af5f51ded7b3f19bc538df"><div class="ttname"><a href="structcoap__dtls__pki__t.html#ae136f22847af5f51ded7b3f19bc538df">coap_dtls_pki_t::validate_cn_call_back</a></div><div class="ttdeci">coap_dtls_cn_callback_t validate_cn_call_back</div><div class="ttdoc">CN check call-back function.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00218">coap_dtls.h:218</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_ae1ae69b200d26250747f8602af02e990"><div class="ttname"><a href="structcoap__dtls__pki__t.html#ae1ae69b200d26250747f8602af02e990">coap_dtls_pki_t::allow_expired_crl</a></div><div class="ttdeci">uint8_t allow_expired_crl</div><div class="ttdoc">1 if expired crl is allowed</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00203">coap_dtls.h:203</a></div></div>
<div class="ttc" id="astructcoap__dtls__pki__t_html_affa25ec7295abef854ec772cb7a45325"><div class="ttname"><a href="structcoap__dtls__pki__t.html#affa25ec7295abef854ec772cb7a45325">coap_dtls_pki_t::pki_key</a></div><div class="ttdeci">coap_dtls_key_t pki_key</div><div class="ttdoc">PKI key definition.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00240">coap_dtls.h:240</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_a504bc3e7ee0b888a88dd6af563fcceb1"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#a504bc3e7ee0b888a88dd6af563fcceb1">coap_pki_key_asn1_t::private_key</a></div><div class="ttdeci">const uint8_t * private_key</div><div class="ttdoc">ASN1 (DER) Private Key.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00151">coap_dtls.h:151</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_a55296c7278c11f29066bdaac19b111b0"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#a55296c7278c11f29066bdaac19b111b0">coap_pki_key_asn1_t::private_key_type</a></div><div class="ttdeci">coap_asn1_privatekey_type_t private_key_type</div><div class="ttdoc">Private Key Type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00155">coap_dtls.h:155</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_a7f0b82d44a05a9f4ae06e8e6c322c608"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#a7f0b82d44a05a9f4ae06e8e6c322c608">coap_pki_key_asn1_t::public_cert_len</a></div><div class="ttdeci">size_t public_cert_len</div><div class="ttdoc">ASN1 Public Cert length.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00153">coap_dtls.h:153</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_a943b8a66023d48fa9fe7ff105eff24f8"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#a943b8a66023d48fa9fe7ff105eff24f8">coap_pki_key_asn1_t::private_key_len</a></div><div class="ttdeci">size_t private_key_len</div><div class="ttdoc">ASN1 Private Key length.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00154">coap_dtls.h:154</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_a9c30a93f82295a4b25b5315a1ce4cbaa"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#a9c30a93f82295a4b25b5315a1ce4cbaa">coap_pki_key_asn1_t::ca_cert</a></div><div class="ttdeci">const uint8_t * ca_cert</div><div class="ttdoc">ASN1 (DER) Common CA Cert.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00149">coap_dtls.h:149</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_aa058c22c386cbb59fe33c3d17129a7fd"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#aa058c22c386cbb59fe33c3d17129a7fd">coap_pki_key_asn1_t::ca_cert_len</a></div><div class="ttdeci">size_t ca_cert_len</div><div class="ttdoc">ASN1 CA Cert length.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00152">coap_dtls.h:152</a></div></div>
<div class="ttc" id="astructcoap__pki__key__asn1__t_html_aa16f42c1efe11b074c64d5f3e94eda33"><div class="ttname"><a href="structcoap__pki__key__asn1__t.html#aa16f42c1efe11b074c64d5f3e94eda33">coap_pki_key_asn1_t::public_cert</a></div><div class="ttdeci">const uint8_t * public_cert</div><div class="ttdoc">ASN1 (DER) Public Cert.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00150">coap_dtls.h:150</a></div></div>
<div class="ttc" id="astructcoap__pki__key__pem__t_html_a318b04bfb39d934fae2639da5c599d11"><div class="ttname"><a href="structcoap__pki__key__pem__t.html#a318b04bfb39d934fae2639da5c599d11">coap_pki_key_pem_t::ca_file</a></div><div class="ttdeci">const char * ca_file</div><div class="ttdoc">File location of Common CA in PEM format.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00140">coap_dtls.h:140</a></div></div>
<div class="ttc" id="astructcoap__pki__key__pem__t_html_ae1785dd0521a14bc8835951312f55803"><div class="ttname"><a href="structcoap__pki__key__pem__t.html#ae1785dd0521a14bc8835951312f55803">coap_pki_key_pem_t::public_cert</a></div><div class="ttdeci">const char * public_cert</div><div class="ttdoc">File location of Public Cert in PEM format.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00141">coap_dtls.h:141</a></div></div>
<div class="ttc" id="astructcoap__pki__key__pem__t_html_afb80e3212cd4e8e5c9cb8f453bf5a942"><div class="ttname"><a href="structcoap__pki__key__pem__t.html#afb80e3212cd4e8e5c9cb8f453bf5a942">coap_pki_key_pem_t::private_key</a></div><div class="ttdeci">const char * private_key</div><div class="ttdoc">File location of Private Key in PEM format.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00142">coap_dtls.h:142</a></div></div>
<div class="ttc" id="astructcoap__session__t_html"><div class="ttname"><a href="structcoap__session__t.html">coap_session_t</a></div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00056">coap_session.h:56</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a0e449eb256836dcf5932791f53881b6e"><div class="ttname"><a href="structcoap__session__t.html#a0e449eb256836dcf5932791f53881b6e">coap_session_t::dtls_timeout_count</a></div><div class="ttdeci">unsigned int dtls_timeout_count</div><div class="ttdoc">dtls setup retry counter</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00092">coap_session.h:92</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a29f92f61ab5c863c90254ce71e3859eb"><div class="ttname"><a href="structcoap__session__t.html#a29f92f61ab5c863c90254ce71e3859eb">coap_session_t::sock</a></div><div class="ttdeci">coap_socket_t sock</div><div class="ttdoc">socket object for the session, if any</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00068">coap_session.h:68</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a2b1cf84dfbbb313dd07afe2eba0f498b"><div class="ttname"><a href="structcoap__session__t.html#a2b1cf84dfbbb313dd07afe2eba0f498b">coap_session_t::max_retransmit</a></div><div class="ttdeci">unsigned int max_retransmit</div><div class="ttdoc">maximum re-transmit count (default 4)</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00089">coap_session.h:89</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a382b6afaed298581b57d62aaf043cfe3"><div class="ttname"><a href="structcoap__session__t.html#a382b6afaed298581b57d62aaf043cfe3">coap_session_t::state</a></div><div class="ttdeci">coap_session_state_t state</div><div class="ttdoc">current state of relationaship with peer</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00060">coap_session.h:60</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a62089dd9c72836d322ae0ce0d0e7114f"><div class="ttname"><a href="structcoap__session__t.html#a62089dd9c72836d322ae0ce0d0e7114f">coap_session_t::proto</a></div><div class="ttdeci">coap_proto_t proto</div><div class="ttdoc">protocol used</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00058">coap_session.h:58</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a8f8e37457b167cc8b95fadd7eeffd8d7"><div class="ttname"><a href="structcoap__session__t.html#a8f8e37457b167cc8b95fadd7eeffd8d7">coap_session_t::context</a></div><div class="ttdeci">struct coap_context_t * context</div><div class="ttdoc">session's context</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00070">coap_session.h:70</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a9ddc6f7076a6c6f3781e65d8c7555489"><div class="ttname"><a href="structcoap__session__t.html#a9ddc6f7076a6c6f3781e65d8c7555489">coap_session_t::dtls_event</a></div><div class="ttdeci">int dtls_event</div><div class="ttdoc">Tracking any (D)TLS events on this sesison.</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00093">coap_session.h:93</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_a9eb6890809e9aa01d225691bb4ae97db"><div class="ttname"><a href="structcoap__session__t.html#a9eb6890809e9aa01d225691bb4ae97db">coap_session_t::tls</a></div><div class="ttdeci">void * tls</div><div class="ttdoc">security parameters</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00071">coap_session.h:71</a></div></div>
<div class="ttc" id="astructcoap__session__t_html_ac126597f3f66272ed3e9c5439570e4df"><div class="ttname"><a href="structcoap__session__t.html#ac126597f3f66272ed3e9c5439570e4df">coap_session_t::mtu</a></div><div class="ttdeci">unsigned mtu</div><div class="ttdoc">path or CSM mtu</div><div class="ttdef"><b>Definition</b> <a href="coap__session_8h_source.html#l00063">coap_session.h:63</a></div></div>
<div class="ttc" id="astructcoap__socket__t_html_afc857e7bf0427e0d08e2be5604bc5516"><div class="ttname"><a href="structcoap__socket__t.html#afc857e7bf0427e0d08e2be5604bc5516">coap_socket_t::flags</a></div><div class="ttdeci">coap_socket_flags_t flags</div><div class="ttdef"><b>Definition</b> <a href="coap__io_8h_source.html#l00048">coap_io.h:48</a></div></div>
<div class="ttc" id="astructcoap__tls__version__t_html"><div class="ttname"><a href="structcoap__tls__version__t.html">coap_tls_version_t</a></div><div class="ttdoc">The structure used for returning the underlying (D)TLS library information.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00047">coap_dtls.h:47</a></div></div>
<div class="ttc" id="astructcoap__tls__version__t_html_a0a7319dc6fd261d2ce899ac3da26d4c1"><div class="ttname"><a href="structcoap__tls__version__t.html#a0a7319dc6fd261d2ce899ac3da26d4c1">coap_tls_version_t::built_version</a></div><div class="ttdeci">uint64_t built_version</div><div class="ttdoc">(D)TLS Built against Library Version</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00050">coap_dtls.h:50</a></div></div>
<div class="ttc" id="astructcoap__tls__version__t_html_acd0dcf58914dd79d6110bb4d6a910c58"><div class="ttname"><a href="structcoap__tls__version__t.html#acd0dcf58914dd79d6110bb4d6a910c58">coap_tls_version_t::version</a></div><div class="ttdeci">uint64_t version</div><div class="ttdoc">(D)TLS runtime Library Version</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00048">coap_dtls.h:48</a></div></div>
<div class="ttc" id="astructcoap__tls__version__t_html_aec97830d2623e4354e12e00467d3dcc2"><div class="ttname"><a href="structcoap__tls__version__t.html#aec97830d2623e4354e12e00467d3dcc2">coap_tls_version_t::type</a></div><div class="ttdeci">int type</div><div class="ttdoc">Library type.</div><div class="ttdef"><b>Definition</b> <a href="coap__dtls_8h_source.html#l00049">coap_dtls.h:49</a></div></div>
<div class="ttc" id="authash_8h_html_aba7bc1797add20fe3efdf37ced1182c5"><div class="ttname"><a href="uthash_8h.html#aba7bc1797add20fe3efdf37ced1182c5">uint8_t</a></div><div class="ttdeci">unsigned char uint8_t</div><div class="ttdef"><b>Definition</b> <a href="uthash_8h_source.html#l00079">uthash.h:79</a></div></div>
</div><!-- fragment --></div><!-- contents -->
</div><!-- doc-content -->
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
  <ul>
    <li class="navelem"><a class="el" href="dir_68267d1309a1af8e8297ef4c3efbcdba.html">src</a></li><li class="navelem"><a class="el" href="coap__openssl_8c.html">coap_openssl.c</a></li>
    <li class="footer">Generated on Fri Dec 27 2024 09:57:44 for libcoap by <a href="https://www.doxygen.org/index.html"><img class="footer" src="doxygen.svg" width="104" height="31" alt="doxygen"/></a> 1.9.8 </li>
  </ul>
</div>
</body>
</html>
